Old 15th August 2002, 20:06   #1
puresynergy
Junior Member
 
Join Date: Aug 2002
Location: Springfield, Missouri
Posts: 1
Send a message via ICQ to puresynergy
How secure is the shoutcast server?

Just wondering about security of the shoutcast server.. Does it open any ports up that could be used maliciously? I am a server administrator and a huge shoutcast fan. Planning on setting up my own. Thank in advance.
puresynergy is offline   Reply With Quote
Old 16th August 2002, 02:38   #2
joey3k
Junior Member
 
Join Date: Aug 2002
Location: Canada
Posts: 1
it seems to be

Hey,

That's a very good question you asked. It seems to be, except I believe you should take a look at this advisory that was released
http://online.securityfocus.com/arch...4/2002-08-10/0

That's about it. There may be more vulnerabilities in the server (i've heard rumours) but, they haven't been submitted to bugtraq so good chance you'll be A.OK!

Good luck!
-Joey
joey3k is offline   Reply With Quote
Old 16th August 2002, 04:04   #3
DJ AmPs
Major Dude
 
DJ AmPs's Avatar
 
Join Date: Mar 2002
Location: g
Posts: 1,603

For ISP's running several instances of DNAS for various users and do not create a seperate log file for each user, they are digging their own grave. This is not Nullsoft's fault -- it is negligence on behalf of the ISP for this "exploit" to even be possible.

-amps
DJ AmPs is offline   Reply With Quote
Old 16th August 2002, 09:42   #4
Jay
Moderator Alumni
 
Jay's Avatar
 
Join Date: May 2000
Location: Next Door
Posts: 8,941
I still never understood why they think this is a security vulnerability, if you can read the log you can most certainly read the config file.

I think this was intentional to help users who had forgotten their password at the console or were unsure of what they set in the DSP.

At any rate I think that it has been said that it will now be removed in the next version.
Jay is offline   Reply With Quote
Reply
Go Back   Winamp & Shoutcast Forums > Shoutcast > Shoutcast Discussions

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump