NetSight
IP …
medium5.0Public exploit code

CVE-2009-0753

Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading "//" (double slash) in the …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading "//" (double slash) in the filename.

Affected products

VendorProductAffected versions
MldonkeyMldonkey
Versions 2.8.4, 2.8.7, 2.9, 2.9.0-r3, 2.9.7

Weakness classification

CWE-22

References