Flaw in eMule 0.49

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1052647 漏洞类型
发布时间 2008-07-15 更新时间 2008-07-15
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2008070028
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
eMule 0.49 and previous versions could expose the OS user account name
when it sends the shared files list.
When an user asks for the shared files list of another user, the full
path of folders are sent and they're fully visible into the emule log.
example:
Requesting shared files from 'yohan'
User yohan (1507...) shares directory 'C:Documents and
SettingsJean-DenisMy documents...'

OS user account name Jean-Denis is visible and could be used in further attacks.