CVE-2007-5714

The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login access and execute arbitrary code.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2007-10-30

Last modified

2024-09-17

Weaknesses

CWE-287

Affected products

• Mldonkey Ebuild (Gentoo)

References

• http://secunia.com/advisories/27366
• http://security.gentoo.org/glsa/glsa-200710-25.xml