CVE-2002-1470: Nullsoft Shoutcast Server

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.

Affected products

• Nullsoft Shoutcast Server: version 1.8.9 only

Published 2003-04-22. Last modified 2026-06-16.