Lucene search

K
cve[email protected]CVE-2007-4100
HistoryJul 31, 2007 - 10:17 a.m.

CVE-2007-4100

2007-07-3110:17:00
NVD-CWE-Other
web.nvd.nist.gov
15
mldonkey
2.9.0
code loading
ip blocklist
security vulnerability
cve-2007-4100

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.02 Low

EPSS

Percentile

88.6%

MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist.

CPENameOperatorVersion
mldonkey:mldonkeymldonkeyle2.8.7

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.02 Low

EPSS

Percentile

88.6%

Related for CVE-2007-4100