Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-11-01T17:00:00Z

Updated: 2024-09-17T03:27:38.660Z

Reserved: 2007-11-01T00:00:00Z

Link: CVE-2002-2412

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2002-12-31T05:00:00.000

Modified: 2008-09-05T20:33:09.507

Link: CVE-2002-2412

cve-icon Redhat

No data.