BulletScript MailList bsml.pl Information Disclosure Vulnerability

Bugtraq ID:	9311
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 29 2003 12:00AM
Updated:	Dec 29 2003 12:00AM
Credit:	The disclosure of this issue has been credited to M0rf M0rf <[email protected]>.
Vulnerable:	BulletScript MailList
Not Vulnerable:

BulletScript MailList bsml.pl Information Disclosure Vulnerability

It has been reported that BulletScript MailList may be prone to an information disclosure vulnerability that may allow remote attackers to gain access to sensitive information. The issue is reported to be present in the 'action' parameter of bsml.pl script. Information gathered via these attacks may aid an attacker in mounting further attacks against a vulnerable system and the affected users.

Due to a lack of information, further details cannot be outlined at the moment. This BID will be updated as more information becomes available.

BulletScript MailList bsml.pl Information Disclosure Vulnerability

The following proof of concept examples have been supplied:

http://www.example.com/cgi-bin/path_to_file/bsml.pl?action=empty
http://www.example.com/cgi-bin/path_to_file/bsml.pl?action=sm
http://www.example.com/cgi-bin/path_to_file/bsml.pl?action=edit

BulletScript MailList bsml.pl Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

BulletScript MailList bsml.pl Information Disclosure Vulnerability

References:

• MailList (BulletScript)