RE: Messenger Pro 3 from Clickatell.{Allows you to spoof Mobile Numbers}

["Razvan Dragomirescu" <drazvan () kappa ro>]

And if you want to do this directly from your phone or on the web, there's
something we wrote: http://www.simeda.com/smsxtender.html . It's been around
for quite a while.

Razvan

--
Razvan Dragomirescu
Chief Technology Officer
SIMEDA GmbH
www.simeda.com
N44027'15"  E26006'09"
K57NL QD83Q

-----Original Message-----
From: Jignesh Ghaghada [mailto:jghaghada () treadsetters com]
Sent: Tuesday, February 17, 2004 1:01 PM
To: vuln-dev () securityfocus com
Subject: Messenger Pro 3 from Clickatell.{Allows you to spoof Mobile
Numbers}




Messenger Pro 3 from Clickatell.com has a security issue which allows a
person to input any mobile number and send a txt message which can cause
problems. After installing the software you are able to login and get 5 free
messages or credits. You can register as many times as you want getting 5
credits after you have finished or used up your credits allowing you to send
multiple messages. Under the options tab of the program there is an Extra
setting which allows you to put in a Sender Id:. under this option you can
input any mobile number and send the text which sends a txt message as
showing it coming from someone else. I.E. Spoofing.Example:

A No: +123456789
B No: +987654321
C No: +147258369

Let us say that you wanted to send a message to B but didnt want to show
your number but wanted C's No to appear you can input C's No and send the
message. {Spoofing}.

I am not quite versatile with explaining it in full detail but this is all i
can write.

Thanks

Jignesh Ghaghada