32 matches found
CVE-2009-1440
CVE-2009-1440 affects amule (eD2k/Kademlia client); the vulnerability is an incomplete blacklist in DownloadListCtrl.cpp that lets a remote attacker craft a filename to inject arguments into the user’s video player. Advisories (Debian DSA-1821-1, Gentoo GLSA-200909-06, OpenVAS, Nessus plugins) co...
aMule 'wxExecute()'任意命令执行漏洞
BUGTRAQ ID: 34683 CNCAN ID：CNCAN-2009042301 aMule是一款与eMule类似的电驴下载软件。 aMule不正确过滤部分字符，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 存在问题的代码src/DownloadListCtrl.cpp： command = wxT"xterm -T "aMule Preview" -iconic -e mplayer '$file'"; ... wxString rawFileName = file-GetFullName.GetRaw; command.ReplacewxT"$file",...
UBUNTU-CVE-2006-2692
Multiple unspecified vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to read arbitrary image, HTML, or PHP files via unknown vectors, probably related to directory traversal...
CVE-2006-2692
Multiple unspecified vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to read arbitrary image, HTML, or PHP files via unknown vectors, probably related to directory traversal...
CVE-2006-2692
Multiple unspecified vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to read arbitrary image, HTML, or PHP files via unknown vectors, probably related to directory traversal...
DEBIAN-CVE-2006-2691
Unspecified "information leakage" vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to access arbitrary images, including dynamically generated images, via unknown vectors...
CVE-2006-2691
Unspecified "information leakage" vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to access arbitrary images, including dynamically generated images, via unknown vectors...
CVE-2006-2692
Multiple unspecified vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to read arbitrary image, HTML, or PHP files via unknown vectors, probably related to directory traversal...
CVE-2006-2692
CVE-2006-2692 concerns multiple unspecified vulnerabilities in the aMuleWeb component of AMule prior to 2.1.2. The provided records consistently describe a directory traversal-type issue that could allow remote attackers to read arbitrary image, HTML, or PHP files via unknown vectors. The affecte...
CVE-2006-2691
Technical details about CVE-2006-2691 are not publicly disclosed in the provided documents. Monitor for updates from official advisories; current sources only reiterate an information leakage vulnerability in AMuleWeb prior to 2.1.2.
[SA20351] aMule Information Disclosure Vulnerability
TITLE: aMule Information Disclosure Vulnerability SECUNIA ADVISORY ID: SA20351 VERIFY ADVISORY: http://secunia.com/advisories/20351/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: aMule 2.x...