← Vulnerability feed

Vulnerability record · CVE-1999-1369 · published 14 April 1999

CVE-1999-1369: Realnetworks realserver vulnerability

RRealnetworks · Realserver

Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges.

4.6 CVSS 2.0 Medium EPSS 0.87% · top 42.9%
4.6CVSS 2.0 base score
0.87%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
16 Jun 2026Last modified by NVD

Description

Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=92411181619110&w=2
http://marc.info/?l=bugtraq&m=92411181619110&w=2

Track CVE-1999-1369 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2000-0474Realnetworks realserver vulnerabilityReal Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory.EPSS 10%7.8CVE-2000-0272Realnetworks realserver vulnerabilityRealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.EPSS 10%7.8CVE-1999-1045Realnetworks realserver vulnerabilitypnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request.EPSS 2.2%7.5CVE-2003-0725RealNetworks Helix/RealServer RTSP parser buffer overflowThe RTSP protocol parser in the View Source plug-in (vsrcplin.so / vsrcplin3260.dll) shipped with RealNetworks Helix Universal Server 9 and RealSyste…EPSS 49%analysed5.0CVE-2000-1181Realnetworks realserver vulnerabilityReal Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensitive infor…EPSS 7.9%5.0CVE-2000-0185Realnetworks realserver vulnerabilityRealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.EPSS 5.1%5.0CVE-2000-0001Realnetworks realserver vulnerabilityRealMedia server allows remote attackers to cause a denial of service via a long ramgen request.EPSS 6.2%

Source: NIST National Vulnerability Database (record CVE-1999-1369), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.