Absolute path traversal vulnerability in MLDonkey 2.8.4 up to and including 2.9.7 allows remote malicious users to read arbitrary files via a leading "//" (double slash) in the filename.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mldonkey mldonkey 2.9.0-r3 |
||
mldonkey mldonkey 2.9.7 |
||
mldonkey mldonkey 2.8.4 |
||
mldonkey mldonkey 2.9 |
||
mldonkey mldonkey 2.8.7 |