Bugtraq mailing list archives

Shareaza P2P Remote Vulnerability


From: Ryan Smith <whatstheaddress () gmail com>
Date: Fri, 27 Jan 2006 06:45:46 -0600

Abstract:
There is a vulnerability present in the latest version of the Shareaza
P2P file trading software.  At a minimum, this vulnerability would
easily allow parties (RIAA) to disrupt P2P services.  Remote code
execution is also possible.

Products affected:
Shareaza
eTomi

Vulnerability Impact:
Remote Code Execution

Credit:
Ryan Smith (whatstheaddress () gmail com)

Advisory:
http://www.hustlelabs.com/shareaza_advisory.pdf


Current thread: