Bugtraq mailing list archives

2007-06-03: PeerCast streaming server submits cleartext password


From: mpeg () freeshells ch
Date: 4 Jun 2007 01:29:27 -0000

Hi there,

peercast also submits the configured password in cleartext. e.g.
http://www.domain.tld:7144/admin?cmd=login&pass=asdfg.jodi.org&submit=Login

well, I have just played a bit around with it, so I assume this is already known. Solution might be
to use stunnel.

Have Fun :)
Greetz mpeg


Current thread: