Debian Security Advisory DSA 1739-1 (mldonkey)

Summary
The remote host is missing an update to mldonkey announced via advisory DSA 1739-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201739-1
Insight
It has been discovered that mldonkey, a client for several P2P networks, allows attackers to download arbitrary files using crafted requests to the HTTP console. For the stable distribution (etch), this problem has been fixed in version 2.9.5-2+lenny1. For the unstable distribution (sid), this problem will be fixed soon. The old stable distribution (etch) is not affected by this problem. We recommend that you upgrade your mldonkey packages.