Mike's World Mail Machine Mailmachine.CGI Local File Include Vulnerability

Bugtraq ID:	24852
Class:	Input Validation Error
CVE:	CVE-2007-3702
Remote:	Yes
Local:	No
Published:	Jul 10 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	H4 is credited with the discovery of this vulnerability.
Vulnerable:	Mail Machine Mail Machine 3.989 Mail Machine Mail Machine 3.988 Mail Machine Mail Machine 3.987 Mail Machine Mail Machine 3.985 Mail Machine Mail Machine 3.980
Not Vulnerable:

Mike's World Mail Machine Mailmachine.CGI Local File Include Vulnerability

Mike's World Mail Machine is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

Mike's World Mail Machine Mailmachine.CGI Local File Include Vulnerability

Attackers may exploit this issue through a browser.

The following exploit code has been provided:

• /data/vulnerabilities/exploits/24852.pl

Mike's World Mail Machine Mailmachine.CGI Local File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Mike's World Mail Machine Mailmachine.CGI Local File Include Vulnerability

References:

• Mail Machine Web Site (Mail Machine)