[<prev] [next>] [day] [month] [year] [list]
Date: Mon, 23 Feb 2009 22:43:09 +0100
From: Florian Weimer <fw@...eb.enyo.de>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: CVE request: mldonkey arbitrary file download vulnerability
mldonkey in version 2.9.7 and earlier permits remote attackers to
download arbitrary files accessible to the mldonkey daemon, using
crafted requests to the HTTP console.
<https://savannah.nongnu.org/bugs/?25667>
(The proposed patch deals with this in a rather odd place.)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Powered by Openwall GNU/*/Linux -
Powered by OpenVZ
