CVE-2011-2077

The CVE-2011-2077 entry concerns the default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier, which allows external TCP connections to port 10000 instead of restricting to 127.0.0.1. This misconfiguration enables remote TCP sessions and is described...

CVE-2011-2078

Technical details (affected product/versions, root cause, exploitability) are not publicly provided in the supplied documents. Monitor for updates from these sources.

CVE-2011-2077

The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session...

CVE-2006-2310

BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service hang via a request for a .cfm file whose name contains an MS-DOS device name such as 1 con, 2 aux, 3 com1, and 4 com2...

CVE-2006-2311

Cross-site scripting XSS vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a 1 .cfm or 2 .cfml file, which reflects the result in the default error page...

Cross site scripting

Cross-site scripting XSS vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a 1 .cfm or 2 .cfml file, which reflects the result in the default error page...

CVE-2006-2311

Cross-site scripting XSS vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a 1 .cfm or 2 .cfml file, which reflects the result in the default error page...

CVE-2006-2310

BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service hang via a request for a .cfm file whose name contains an MS-DOS device name such as 1 con, 2 aux, 3 com1, and 4 com2...

CVE-2006-2310

BlueDragon Server / Server JX 6.2.1.286 for Windows is vulnerable to a denial-of-service via a crafted request for a .cfm filename containing an MS-DOS device name (for example, con, aux, com1, com2). The underlying issue, as described in the CVE entry, is improper handling/sanitization of user-s...

CVE-2006-2311

Affected product: BlueDragon Server / Server JX 6.2.1.286 for Windows. Vulnerability: Cross-site scripting (XSS) via the filename parameter in requests to .cfm or .cfml files, reflected in the default error page. Root cause: the input is not properly sanitized in the filename handling. Impact: re...

BlueDragon <= 6.2.1.286 Multiple Vulnerabilities

Binary data 3668.prm...

BlueDragon Server 6.2.1 - .cfm Denial of Service

BlueDragon Server 6.2.1 - .cfm Denial of Service source: https://www.securityfocus.com/bid/18624/info BlueDragon is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to efficiently handle malformed GET requests. An attacker can exploit this issue to...

BlueDragon Server 6.2.1 - '.cfm' Denial of Service

source: https://www.securityfocus.com/bid/18624/info BlueDragon is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to efficiently handle malformed GET requests. An attacker can exploit this issue to cause the service to stop responding, effectivel...

BlueDragon 6.2.1 Multiple Remote Vulnerabilities (XSS, DoS)

The remote host is running BlueDragon Server / Server JX, Java-based servers for stand-alone deployment of CFML ColdFusion Markup Language pages. The version of BlueDragon Server / Server JX installed on the remote host fails to sanitize user-supplied input passed as part of the filename before...