Vulnerability Development mailing list archives
Messenger Pro 3 from Clickatell.{Allows you to spoof Mobile Numbers}
From: Jignesh Ghaghada <jghaghada () treadsetters com>
Date: 17 Feb 2004 11:00:41 -0000
Messenger Pro 3 from Clickatell.com has a security issue which allows a person to input any mobile number and send a txt message which can cause problems. After installing the software you are able to login and get 5 free messages or credits. You can register as many times as you want getting 5 credits after you have finished or used up your credits allowing you to send multiple messages. Under the options tab of the program there is an Extra setting which allows you to put in a Sender Id:. under this option you can input any mobile number and send the text which sends a txt message as showing it coming from someone else. I.E. Spoofing.Example: A No: +123456789 B No: +987654321 C No: +147258369 Let us say that you wanted to send a message to B but didnt want to show your number but wanted C's No to appear you can input C's No and send the message. {Spoofing}. I am not quite versatile with explaining it in full detail but this is all i can write. Thanks Jignesh Ghaghada
Current thread:
- Messenger Pro 3 from Clickatell.{Allows you to spoof Mobile Numbers} Jignesh Ghaghada (Feb 17)
- RE: Messenger Pro 3 from Clickatell.{Allows you to spoof Mobile Numbers} AJ McKee (Feb 17)
- <Possible follow-ups>
- RE: Messenger Pro 3 from Clickatell.{Allows you to spoof Mobile Numbers} Razvan Dragomirescu (Feb 17)
- RE: Messenger Pro 3 from Clickatell.{Allows you to spoof Mobile Numbers} tlarholm (Feb 17)