mldonkey, a multi-networks file-sharing client - Patches: patch #6754, Fix local file access bug in...
You are not allowed to post comments on this tracker with your current authentication level.
patch #6754: Fix local file access bug in internal http server
Submitter: | kyak <kyak> | ||
Submitted: | Tue 24 Feb 2009 06:30:44 PM UTC | ||
Category: | None | Priority: | 9 - Immediate |
Status: | Done | Assigned to: | None |
Open/Closed: | Closed |
Jump to the original submission
Tue 24 Feb 2009 07:22:39 PM UTC, comment #6: |
spiralvoice <spiralvoice>![]() |
Tue 24 Feb 2009 06:38:44 PM UTC, comment #5: Committed 2009/02/24 |
spiralvoice <spiralvoice>![]() |
Tue 24 Feb 2009 06:30:44 PM UTC, comment #4: This item has been reassigned from the project mldonkey, a multi-networks file-sharing client bugs tracker to your tracker. |
spiralvoice <spiralvoice>![]() |
Tue 24 Feb 2009 06:30:32 PM UTC, comment #3: For the record, this bug was caused by patch #5787, committed
|
spiralvoice <spiralvoice>![]() |
Mon 23 Feb 2009 06:30:09 PM UTC, comment #2: please test the attached patch |
spiralvoice <spiralvoice>![]() |
Mon 23 Feb 2009 08:29:47 AM UTC, comment #1: I was expecting, that reaction would be fast. Don't you guys believe that this is a strong security issue? |
kyak <kyak> |
Tue 24 Feb 2009 06:30:44 PM UTC, original submission:
I can access http://myip:4080//etc/passwd from my browser.
|
kyak <kyak> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 6 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2009-02-24 | spiralvoice | Attached File | - | ![]() |
Added 6754_2.patch, #17524 |
2009-02-24 | spiralvoice | Priority | 5 - Normal | ![]() |
9 - Immediate |
Status | None | ![]() |
Done | ||
Open/Closed | Open | ![]() |
Closed | ||
Summary | Http double slash request arbitrary file access vulnerability | ![]() |
Fix local file access bug in internal http server | ||
2009-02-24 | spiralvoice | Reassign item | mldonkey, a multi-networks file-sharing client, bug #25667 | ![]() |
mldonkey, a multi-networks file-sharing client, patch #6754 |
Powered by Savane 3.12.
Corresponding source code
Committed file #17524 to prevent http://mldonkey:4080/downloads.ini download