MLdonkey is prone to a vulnerability that lets attackers download arbitrary files. The issue occurs because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary files within the context of the application. Information harvested may aid in launching further attacks. MLdonkey 2.9.7 is vulnerable other versions may also be affected.

Fixes are available please see the http://www.nongnu.org/mldonkey/ for more information.

• http://www.securityfocus.com/bid/33865

---

Updated on 2015-03-25