Description
Directory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a magnet request.
References
- GLSA-200503-37 vendor-advisory
- limewire-magnet-directory-traversal(19695) vdb-entry
- 14555 third-party-advisory
- 20050314 LimeWire Gnutella client two vulnerabilities mailing-list