PT-2007-6699 · Mldonkey · Mldonkey

Publicado 2007-10-30 · Atualizado 2008-09-05 · CVE-2007-5714

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MLDonkey versions prior to 2.9.0-r3

Description The issue allows remote attackers to obtain login access and execute arbitrary code due to a p2p user account with an empty default password and valid login shell.

Recommendations For versions prior to 2.9.0-r3, update to version 2.9.0-r3 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2007-5714

Produtos afetados

Mldonkey

Referências · 3

• http://secunia.com/advisories/27366 · Nota
• http://security.gentoo.org/glsa/glsa-200710-25.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-5714 · Nota de Segurança