MLDonkey: Privilege escalation

Background MLDonkey is a peer-to-peer filesharing client that connects to several different peer-to-peer networks, including Overnet and BitTorrent. Description The Gentoo MLDonkey ebuild adds a user to the system named "p2p" so that the MLDonkey service can run under a user with low privileges...

CVE-2007-4100

MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/webinfos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist...

Design/Logic Flaw

MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/webinfos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist...

CVE-2007-4100

MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/webinfos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist...

CVE-2007-4100

CVE-2007-4100 affects MLDonkey prior to 2.9.0. The flaw occurs because the application does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, allowing remote attackers to bypass the IP blocklist. The NVD entry lists a CVSSv2 base score of 5.0 (Medium) with ...

CVE-2007-4100

MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/webinfos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist...

CVE-2007-4100

Removed by vendor...

CVE-2007-4100: Undefined Security Weakness

MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/webinfos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist...

MLDonkey Detection (Telnet)

Telnet based detection of MLDonkey. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11124";...

MLDonkey Detection (HTTP)

HTTP based detection of the MLDonkey web interface. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-1164

The vulnerability CVE-2003-1164 is an XSS flaw in Mldonkey 2.5-4, where an attacker can craft a URI that is reflected into the HTML error page. The affected software is Mldonkey (version 2.5-4). Underlying cause, impact, and concrete exploit details beyond the description are not provided in the ...

CVE-2003-1164

Cross-site scripting XSS vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page...

CVE-2003-1164

Removed by vendor...

CVE-2003-1164: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page...

MLDonkey Detection

Binary data 1881.prm...

CVE-2003-1164

Cross-site scripting XSS vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page...

MLdonkey 2.5-4 - Cross-Site Scripting

MLdonkey 2.5-4 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8946/info It has been reported that the Mldonkey web interface is prone to cross-site scripting attacks when reporting errors. The problem occurs due to insufficient sanitization of script code within requests. This...

mldonkey Detection (telnet check)

mldonkey telnet appears to be running on the remote host. mldonkey is a peer-to-peer filesharing application. This application could be used to share copyright infringing material. It could also result in the inadvertent disclosure of confidential information. C Tenable Network Security, Inc. Not...

mldonkey Detection (WWW)

The mldonkey web interface appears to be running on the remote host. mldonkey is a peer-to-peer filesharing application. This application could be used to share copyright infringing material. It could also result in the inadvertent disclosure of confidential information. %NASLMINLEVEL 70300 C...