Auth bypass in Gentoo Mldonkey Ebuild
CVE-2007-5714
The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login access and execute arbitrary code.
Vulnerability class: Broken Authentication
EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.
Affected products
- Gentoo Mldonkey_ebuild
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)