Shareaza Update Notification Spoofing Vulnerability

  1. Network Vulnerabilities
  2. General
  3. Shareaza Update Notification Spoofing Vulnerability
Summary
This host has Shareaza installed and is prone Update Notification Spoofing vulnerabilities.
Impact
Successful exploitation will let the attackers conduct spoofing attacks. Impact Level: Application
Solution
Upgrade Shareaza version to 2.3.1.0 http://shareaza.sourceforge.net/?id=download
Insight
The flaw is due to update notifications being handled via the domain update.shareaza.com, which is no longer controlled by the vendor. This can be exploited to spoof update notifications.
Affected
Shareaza version prior to 2.3.1.0
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities