The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session.
Weaknesses in this category are typically introduced during the configuration of the software.
Link | Tags |
---|---|
http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt | exploit |
http://securityreason.com/securityalert/8245 | third party advisory |