Anton Raharja PlaySMS Unspecified File Include Vulnerability

Bugtraq ID:	10752
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 19 2004 12:00AM
Updated:	Jul 19 2004 12:00AM
Credit:	This issue was reported in the product change log.
Vulnerable:	Anton Raharja PlaySMS 0.6
Not Vulnerable:

Anton Raharja PlaySMS Unspecified File Include Vulnerability

A vulnerability is reported to exist in the software that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable computer. The issue exists due to improper validation of user-supplied data. Remote attackers could potentially exploit this issue via a vulnerable variable to include a remote malicious script, which will be executed in the context of the server hosting the vulnerable software.

This issue is reported to exist in PlaySMS 0.6. Other versions may be affected as well.

Anton Raharja PlaySMS Unspecified File Include Vulnerability

No exploit is required.

Anton Raharja PlaySMS Unspecified File Include Vulnerability

Solution:
PlaySMS 0.7 is available to address this issue.


Anton Raharja PlaySMS 0.6

• Anton Raharja playsms-0.7.tar.gz
  http://prdownloads.sourceforge.net/playsms/playsms-0.7.tar.gz?download

Anton Raharja PlaySMS Unspecified File Include Vulnerability

References:

• PlaySMS (Anton Raharja)
  
• PlaySMS: Release Notes (Anton Raharja)