MediaCAST 8 and earlier stores passwords in cleartext, which makes it easier for context-dependent attackers to obtain sensitive information by reading an unspecified password data store, a different vulnerability than CVE-2010-0216.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt | exploit |
http://securityreason.com/securityalert/8245 | third party advisory |