cbcvebase.
CVE-2009-2544
published 2009-07-20

CVE-2009-2544: Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live (MPL) allows…

PriorityP433medium6.8CVSS 2.0
AVNACLAuSCCINAN
EXPLOIT
EPSS
3.43%
87.5th percentile
Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live (MPL) allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. (dot dot) in a pathname.

Affected

1 ranges
VendorProductVersion rangeFixed in
marcelo_costafileserver——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.