AlstraSoft E-friends 'GetStartOptions.php' Local File Include Vulnerability

Bugtraq ID:	20088
Class:	Access Validation Error
CVE:	CVE-2006-4913
Remote:	Yes
Local:	No
Published:	Sep 18 2006 12:00AM
Updated:	Oct 27 2010 03:59PM
Credit:	Kw3[R]Ln is credited with the discovery of this vulnerability.
Vulnerable:	AlstraSoft E-Friends 4.8.5 AlstraSoft E-Friends 4.0 AlstraSoft E-Friends 4.96
Not Vulnerable:

AlstraSoft E-friends 'GetStartOptions.php' Local File Include Vulnerability

AlstraSoft E-friends is prone to a local file include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to:

1. Inject arbitrary PHP code into the webserver log files.
2. Include and execute arbitrary files from the vulnerable system in the context of the affected application.

Other attacks are possible.

This issue affects version 4.85 and 4.96; other versions may also be vulnerable.

AlstraSoft E-friends 'GetStartOptions.php' Local File Include Vulnerability

Attackers can exploit this issue via a web client.

The following example URI is available:

http://www.example.com/path/chat/getStartOptions.php?lang=../../../../../../../../../etc/passwd%00

The following sample exploit is available:

• /data/vulnerabilities/exploits/alstrasoft.efriends-lteq4.85-dirtrav.pl

AlstraSoft E-friends 'GetStartOptions.php' Local File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AlstraSoft E-friends 'GetStartOptions.php' Local File Include Vulnerability

References:

• AlstraSoft Efriends Web Site (AlstraSoft)