medium5.0Public exploit code
CVE-2005-0788
LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnutella GET request.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LimeWire 4.1.2 < 4.5.6 - 'GET' Remote File Read2005-03-14 · remote · multiple · Verified
Impact
LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnutella GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Limewire | Limewire | Versions 4.1.2, 4.5.6 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111082448213238&w=2
- http://secunia.com/advisories/14555/
- http://www.gentoo.org/security/en/glsa/glsa-200503-37.xml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19693
- http://marc.info/?l=bugtraq&m=111082448213238&w=2
- http://secunia.com/advisories/14555/
- http://www.gentoo.org/security/en/glsa/glsa-200503-37.xml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19693