Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

MediaCAST 8 admin UI opens port 10000 to outside

CVE-2011-2077 · published 15 years ago
Summary

In MediaCAST version 8 and earlier, the BlueDragon admin interface is set up to listen for network connections on port 10000 from any computer, not just the local server. This allows anyone on the network to connect to the admin console, potentially giving them control over the system. Change the configuration so the interface only accepts connections from 127.0.0.1 (the local machine) or restrict access with a firewall.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
inventivetec mediacast <= 8
cpe:2.3:a:inventivetec:mediacast:*:*:*:*:*:*:*:*
Original advisory text
The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0....
The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
1% chance of attack within 30 days
Type
CWE-16Configuration
Timeline
Published10 May 2011
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2011-2077 · NVD
Track software like this
Free during beta