CVE-2007-5714

CVE-2007-5714 describes a critical vulnerability in the Gentoo ebuild of MLDonkey versions prior to 2.9.0-r3, where a 'p2p' user account was created with an empty default password and a valid login shell. This flaw could allow remote attackers to gain unauthorized login access and execute arbitrary code on affected systems. With a CVSS score of 6.8, this vulnerability is considered medium severity due to its network-based attack vector and medium attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, the presence of a default empty password poses a clear security risk.