CVE:CVE-2011-5253
CNNVD:CNNVD-201201-124
dl Download Ticket Service是一个文件交换服务，可以上传任意文件到web服务器上。
dl Download Ticket Service中存在认证绕过漏洞。攻击者可利用该漏洞绕过认证进程进而获得对受影响系统的未授权访问。dl Download Ticket Service 0.3版本至0.9版本存在该漏洞，其它版本也可能受到影响。
solution:Upgrade thegr dl to a higher version than 0.3,0.4,0.5,0.6,0.7,0.8,0.9,and avoid the version 0.3,0.4,0.5,0.6,0.7,0.8,0.9