CVE-2007-5714 The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login access and execute arbitra...
MediumCVSS 6.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login access and execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo mldonkey ebuild | <= 2.9.0 | No fix listed |
References
- 27366 third-party-advisory
- GLSA-200710-25 vendor-advisory