6.8
CVSSv2

CVE-2009-2544

Published: 20/07/2009 Updated: 19/09/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.9 | Exploitability Score: 8
VMScore: 685
Vector: AV:N/AC:L/Au:S/C:C/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live (MPL) allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. (dot dot) in a pathname.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

marcelo_costa fileserver 1.0

Exploits

########################################### Windows Live Messenger Plus! FileServer 10 ########################################### Found by joepie91 The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact Authentication is done using a user-defined username and ...