Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mldonkey: path traversal

Package(s):

mldonkey

CVE #(s):

CVE-2009-0753

Created:

March 13, 2009

Updated:

March 24, 2009

Description:

From the Debian advisory: It has been discovered that mldonkey, a client for several P2P networks, allows attackers to download arbitrary files using crafted requests to the HTTP console.

Alerts:

Gentoo	200903-36	2009-03-23
Fedora	FEDORA-2009-2758	2009-03-16
Fedora	FEDORA-2009-2703	2009-03-16
Debian	DSA-1739-1	2009-03-13

(Log in to post comments)