CVE-2009-2544

Name of the Vulnerable Software and Affected Versions Marcelo Costa FileServer component version 1.0

Description A directory traversal issue allows remote authenticated users to list arbitrary directories and read arbitrary files by using a .. (dot dot) in a pathname. This affects Microsoft Windows Live Messenger and Messenger Plus! Live (MPL).

Recommendations For version 1.0 of the Marcelo Costa FileServer component, consider restricting access to sensitive directories and files as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.