Description
MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist.
References
- 26230 third-party-advisory
- 25093 vdb-entry
- mldonkey-modules-security-bypass(35656) vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=527976
- 38626 vdb-entry