CVE-2009-0753

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-03-03 · updated 2026-06-16
Weakness: CWE-22

Description

Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading "//" (double slash) in the filename.

Affected products

Mldonkey: 2.8.4, 2.8.7, 2.9, 2.9.0-r3, 2.9.7

References

http://savannah.nongnu.org/bugs/?25667
http://secunia.com/advisories/34008
http://secunia.com/advisories/34306
http://secunia.com/advisories/34345
http://secunia.com/advisories/34436
http://www.debian.org/security/2009/dsa-1739
http://www.gentoo.org/security/en/glsa/glsa-200903-36.xml
http://www.openwall.com/lists/oss-security/2009/02/23/1
http://www.securityfocus.com/bid/33865
https://www.exploit-db.com/exploits/8097
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00542.html
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00617.html

Get alerted when CVE-2009-0753 or the next vulnerability affects your stack