SHOUTcast Server Service Port Default Password

High Nessus Network Monitor Plugin ID 4382

Synopsis

The remote service is protected with default credentials.

Description

The remote SHOUTcast Server's service port is configured to use the default password to allow broadcasting content and administration. Knowing it, an attacker can gain administrative control of the affected application.

Solution

Edit the application's 'sc_serv.ini' file and change the 'Password' setting. Then, restart the service to put the change into effect.

Plugin Details

Severity: High

ID: 4382

Family: Generic

Published: 2008/02/19

Modified: 2016/01/15

Nessus ID: 31098

Risk Information

Risk Factor: High