LimeWire contains a flaw that may allow a remote attacker to access arbitrary files. The issue is triggered due to improper handling of HTTP requests. By issuing a specially crafted HTTP GET request a remote attacker could access arbitrary files resulting in a loss of confidentiality.
Classification
Location:
Remote / Network Access
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Exploit:
Exploit Public
OSVDB:
Web Related
Solution
Upgrade to version 4.6.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
cs.cornell.edu -
