PT-2011-3577

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The issue allows remote attackers to obtain sensitive information via unspecified vectors related to the Public/ directory tree, specifically by handling requests for...

CVE-2011-2081: Exposure of Sensitive Information to an Unauthorized Actor

MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows remote attackers to obtain sensitive information via unspecified vectors related to the Public/ directory tree...

PT-2011-3573

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The default configuration of the New Atlanta BlueDragon administrative interface enables external TCP connections to port 10000, making it easier for remote attackers to have an unspecified impact v...

CVE-2011-2077: Undefined Security Weakness

The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session...

CVE-2010-0216: Undefined Security Weakness

authenticateadsetupfinished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter...

PT-2011-3576

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via a CP ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ or unspecified input to...

CVE-2011-2076: Exposure of Sensitive Information to an Unauthorized Actor

MediaCAST 8 and earlier stores passwords in cleartext, which makes it easier for context-dependent attackers to obtain sensitive information by reading an unspecified password data store, a different vulnerability than CVE-2010-0216...

PT-2011-1361

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The issue allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter to the "authenticate ad setup...

PT-2011-3572

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The issue allows context-dependent attackers to obtain sensitive information by reading an unspecified password data store because passwords are stored in cleartext. Recommendations For MediaCAST...

PT-2011-3575

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The issue allows remote attackers to have an unspecified impact via a 1 CP RIGHTSOURCE or 2 bdclient Inventive cookie to the default URI under "inventivex/managetraining/", related to an "XML...

CVE-2010-0216 MediaCast Password Dump Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Packetninjas L.L.C www.packetninjas.net -= Security Advisory =- Advisory: MediaCast Password Dump Vulnerability Release Date: 04/25/2011 Author: Daniel Clemens daniel.clemensatpacketninjas.net Application: MediaCast = 8 By Inventive, Inc -...

MediaCast 8 Credential Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Packetninjas L.L.C www.packetninjas.net -= Security Advisory =- Advisory: MediaCast Password Dump Vulnerability Release Date: 04/25/2011 Author: Daniel Clemens daniel.clemensatpacketninjas.net Application: MediaCast &ClearSession=1 or...