Paul M. Jones Phorecast Remote Arbitrary Code Execution Vulnerability

Bugtraq ID:	3388
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 02 2001 12:00AM
Updated:	Oct 02 2001 12:00AM
Credit:	This vulnerability was discovered and posted to BugTraq by: [email protected].
Vulnerable:	Paul M. Jones Phorecast 0.30 a
Not Vulnerable:	Paul M. Jones Phorecast 0.40

Paul M. Jones Phorecast Remote Arbitrary Code Execution Vulnerability

Phorecast is freely available, open-source web-based single-user email. It allows users to send and receive email through a web-based interface.

A problem exists in Phorecast that will allow a remote attacker to execute arbitrary code on a host running the software(with the privileges of the webserver process). It is possible to supply arbitrary data to the $include variable. As a result, the affected script may be redirected to execute arbitrary code located on an external host, as specified by the attacker.

This issue can be exploited if the remote attacker submits a maliciously crafted URL.

Paul M. Jones Phorecast Remote Arbitrary Code Execution Vulnerability

This vulnerability can be exploited with a web browser.

Paul M. Jones Phorecast Remote Arbitrary Code Execution Vulnerability

Solution:
The vulnerability is eliminated in version 0.40.


Paul M. Jones Phorecast 0.30 a

• Paul M. Jones phorecast_040.tgz
  http://phorecast.org/install/phorecast_040.tgz

Paul M. Jones Phorecast Remote Arbitrary Code Execution Vulnerability

References:

• Phorecast: Home (Paul M. Jones)