[bug #25667] Http double slash request arbitrary file access vulnerability

spiralvoice <[email protected]> Tue, 24 Feb 2009 18:30:34 +0000

Newsgroups	gmane.network.mldonkey.bugs
Message-ID	<[email protected]>

Follow-up Comment #3, bug #25667 (project mldonkey):

For the record, this bug was caused by patch #5787, committed
2007/03/08 to CVS and first released in MLDonkey 2.8.4.

That bad patch can be found around line 1493 in
http://cvs.savannah.gnu.org/viewvc/mldonkey/mldonkey/src/daemon/driver/driverControlers.ml?r1=1.96&r2=1.97


    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?25667>

_______________________________________________
  Nachricht geschickt von/durch Savannah
  http://savannah.nongnu.org/