CVE-2007-5714: Gentoo Mldonkey Ebuild

Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login access and execute arbitrary code.

Affected products

• Gentoo Mldonkey Ebuild: up to and including 2.9.0

Published 2007-10-30. Last modified 2026-06-16.