[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
2007-06-03: PeerCast streaming server submits cleartext password
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: 2007-06-03: PeerCast streaming server submits cleartext password
- From: mpeg@xxxxxxxxxxxxx
- Date: 4 Jun 2007 01:29:27 -0000
Hi there,
peercast also submits the configured password in cleartext. e.g.
http://www.domain.tld:7144/admin?cmd=login&pass=asdfg.jodi.org&submit=Login
well, I have just played a bit around with it, so I assume this is already
known. Solution might be
to use stunnel.
Have Fun :)
Greetz mpeg