CVE-2011-2079

Published: May 10, 2011Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP_RIGHTSOURCE or (2) bdclient_Inventive cookie to the default URI under inventivex/managetraining/, related to an "XML injection" issue.

Affected (1)

Products: Inventivetec: Mediacast

Inventivetec

1 product

Mediacast

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Inventivetec Mediacast	Up to 8

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://secunia.com/advisories/44182

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/8245

Source: cve@mitre.org

http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/44182

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/8245

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.