CVE-2007-4100

UNKNOWN

MLDonkey before 2

Published Jul 31, 2007

Modified 1 years ago

Details

MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist.

References

WEB

http://osvdb.org/38626

ADVISORY

http://secunia.com/advisories/26230

WEB

http://sourceforge.net/project/shownotes.php?release_id=527976

WEB

http://www.securityfocus.com/bid/25093

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/35656

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2007-4100

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedJul 31, 2007

ModifiedAug 7, 2024

CVE-2007-4100 | Mondoo Vulnerability Intelligence