peter MC tachatte has discovered a vulnerability in Mambo, which can be exploited by malicious people to manipulate certain information and compromise a vulnerable system.

The vulnerability is caused due to an error in the "register_globals" emulation layer in "globals.php" where certain arrays used by the system can be overwritten. This can be exploited to include arbitrary files from external and local resources via the "mosConfig_absolute_path" parameter.

This is related to:
SA17441

NOTE: This is actively being exploited.

Successful exploitation requires that "register_globals" is disabled.

The vulnerability has been confirmed in version 4.5.2.3. Other versions may also be affected.

Solution
Apply patch.
Further details available to Secunia VIM customers

Provided and/or discovered by
peter MC tachatte

Changelog
Further details available to Secunia VIM customers

Original Advisory
Mambo:
http://www.mamboserver.com/index.php?option=com_content&task=view&id=172&Itemid=1

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers