NOS getPlus Downloader Domain Validation Arbitrary File Download Vulnerability

Bugtraq ID:	38313
Class:	Design Error
CVE:	CVE-2010-0189
Remote:	Yes
Local:	No
Published:	Feb 18 2010 12:00AM
Updated:	Feb 26 2010 03:51PM
Credit:	Aviv Raff; Yorick Koster working with iDefense Labs
Vulnerable:	NOS Microsystems getPlus Download Manager 1.5.2 .35 NOS Microsystems getPlus Download Manager 1.2.2 50 NOS Microsystems getPlus Download Manager 0 Adobe Reader 9.3.1 Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.2.1 Adobe Reader 8.1.7 Adobe Reader 8.1.6 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reader 8.1.2 Adobe Reader 8.1.1 Adobe Reader 9.3 Adobe Reader 9.2 Adobe Reader 9.2 Adobe Reader 9.1 Adobe Reader 9.0 Adobe Reader 8.2 Adobe Reader 8.1.2 Security Updat Adobe Reader 8.1 Adobe Reader 8.0 Adobe Adobe Download Manager 1.6.2 .60 Adobe Adobe Download Manager 0 Adobe Acrobat Standard 9.3.1 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 8.2.1 Adobe Acrobat Standard 8.1.7 Adobe Acrobat Standard 8.1.6 Adobe Acrobat Standard 8.1.4 Adobe Acrobat Standard 8.1.3 Adobe Acrobat Standard 8.1.2 Adobe Acrobat Standard 8.1.1 Adobe Acrobat Standard 9.3 Adobe Acrobat Standard 9.2 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Standard 8.2 Adobe Acrobat Standard 8.1 Adobe Acrobat Standard 8.0 Adobe Acrobat Professional 9.3.1 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 8.2.1 Adobe Acrobat Professional 8.1.7 Adobe Acrobat Professional 8.1.6 Adobe Acrobat Professional 8.1.4 Adobe Acrobat Professional 8.1.3 Adobe Acrobat Professional 8.1.2 Adobe Acrobat Professional 8.1.1 Adobe Acrobat Professional 9.3 Adobe Acrobat Professional 9.2 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Adobe Acrobat Professional 8.2 Adobe Acrobat Professional 8.1.2 Security Updat Adobe Acrobat Professional 8.1 Adobe Acrobat Professional 8.0 Adobe Acrobat 9.1.1 Adobe Acrobat 9.3 Adobe Acrobat 9.2
Not Vulnerable:	Adobe Adobe Download Manager 1.6.2 .63

NOS getPlus Downloader Domain Validation Arbitrary File Download Vulnerability

NOS getPlus Downloader is prone to a vulnerability that can allow attackers to download and execute arbitrary files.

Attackers can exploit this issue by enticing a vulnerable user to visit a malicious webpage. Successful exploits will allow malicious files to be downloaded and run with the privileges of the current user.

NOTE: This BID was originally titled "Adobe Download Manager Unspecified Arbitrary File Download Vulnerability". Adobe Download Manager is based on the NOS getPlus Downloader.

The following are vulnerable:

NOS getPlus Downloader 1.5.2.35
Adobe Download Manager prior to 1.6.2.63

Other versions or products based on getPlus Downloader may also be affected.

NOS getPlus Downloader Domain Validation Arbitrary File Download Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NOS getPlus Downloader Domain Validation Arbitrary File Download Vulnerability

Solution:
Vendor updates are available. Please see the references for details.

NOS getPlus Downloader Domain Validation Arbitrary File Download Vulnerability

References:

• Adobe Download Manager issue (David Lenoe)
  
• Adobe Homepage (Adobe)
  
• getPlus Download Manager Homepage (NOS Microsystems)
  
• getPlus insufficient domain name validation vulnerability (Yorick Koster)
  
• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerabili (iDefense Labs)
  
• Security update released for the Adobe Download Manager (Wendy Poland)
  
• Skeletons in Adobe's security closet (Aviv Raff)
  
• iDefense Security Advisory 02.23.10: Multiple Vendor NOS Microsystems getPlus Do (iDefense Labs )
  
• APSB10-08 Security update available for Adobe Download Manager (Adobe)