|
|
Info |
Last Modified |
| 6 months ago |
|
|
|
|
Description |
LimeWire contains a flaw that may allow a remote attacker to access arbitrary files. The issue is triggered due to improper handling of HTTP requests. By issuing a specially crafted HTTP GET request a remote attacker could access arbitrary files resulting in a loss of confidentiality.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
OSVDB:
Web Related
|
|
Solution |
Upgrade to version 4.6.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
LimeWire
 |
4.1.2 |
4.1.3 |
4.1.4 |
4.1.5 |
4.1.7 |
4.1.8 |
4.1.9 |
4.1.10 |
4.2.x |
4.3.x |
4.4.x |
4.5.6 |
|
|
|
|
|
|
Credit |
- Kevin Walsh - kwalsh
 cs.cornell.edu -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
