MultiTheftAuto Multiple Remote Vulnerabilities

Bugtraq ID:	14941
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 26 2005 12:00AM
Updated:	Sep 26 2005 12:00AM
Credit:	Discovery is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	MultiTheftAuto MultiTheftAuto 0.5 patch 1
Not Vulnerable:

MultiTheftAuto Multiple Remote Vulnerabilities

MultiTheftAuto is prone to multiple vulnerabilities.

The following issues were identified:

The first issue can allow an attacker to gain unauthorized access to an administrative file.

The second issue can allow an attacker to trigger a crash in the application.

MultiTheftAuto 0.5 patch 1 and prior versions are vulnerable to these issues.

MultiTheftAuto Multiple Remote Vulnerabilities

An exploit is not required.

A proof of concept example is available:

• /data/vulnerabilities/exploits/mtaboom.c

MultiTheftAuto Multiple Remote Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MultiTheftAuto Multiple Remote Vulnerabilities

References:

• Home Page (MultiTheftAuto)
  
• Server crash and motd deletion in MultiTheftAuto 0.5 patch 1 (Luigi Auriemma )