CVE-2009-0753

Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading "//" (double slash) in the filename.

🔗 References (24)

• cve@mitrehttp://savannah.nongnu.org/bugs/?25667
• cve@mitrehttp://secunia.com/advisories/34008
• cve@mitrehttp://secunia.com/advisories/34306
• cve@mitrehttp://secunia.com/advisories/34345
• cve@mitrehttp://secunia.com/advisories/34436
• cve@mitrehttp://www.debian.org/security/2009/dsa-1739
• cve@mitrehttp://www.gentoo.org/security/en/glsa/glsa-200903-36.xml
• cve@mitrehttp://www.openwall.com/lists/oss-security/2009/02/23/1
• cve@mitrehttp://www.securityfocus.com/bid/33865
• cve@mitrehttps://www.exploit-db.com/exploits/8097
• cve@mitrehttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00542.html
• cve@mitrehttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00617.html
• af854a3a-2127-422b-91ae-364da2661108http://savannah.nongnu.org/bugs/?25667
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/34008
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/34306