OSVDB ID: 85303

Title: Mobus Ad Library for Android SMSC Administrative Information Remote Disclosure

Info

Disclosure

Mar 19, 2012

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Mobus Ad Library for Android contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the application searches the SMS database in order to gain administrative information for the Short Message Service Center (SMSC). This will disclose potentially sensitive information to a remote attacker.

Classification

Location: Remote / Network Access, Mobile Phone / Hand-held Device
Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Solution: Workaround
Exploit: Exploit Public
Disclosure: Uncoordinated Disclosure

Solution

The presence of this software means the host system has been compromised through some other exploit/vulnerability. The only way to ensure the software, and any other malicious software (malware), is completely removed is to re-install the operating system.

Products

Mobus Ad Library

Mobus Ad Library for Android

Unspecified

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/85303