CVE-2011-2080

概要

参考情報

• secunia.com/advisories/44182 · Vendor Advisory
• securityreason.com/securityalert/8245
• packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/67220
• exchange.xforce.ibmcloud.com/vulnerabilities/67221

mediacast のその他の脆弱性

• CVE-2011-2081中 5.0MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows re…
• CVE-2011-2079高 7.5MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP_RIGHTSOURCE or (2) bdclient_Inventive cookie to t…
• CVE-2011-2078中 4.3Multiple cross-site scripting (XSS) vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow …
• CVE-2011-2077高 7.5The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections…
• CVE-2011-2076中 5.0MediaCAST 8 and earlier stores passwords in cleartext, which makes it easier for context-dependent attackers to obtain sensitive information…