The remote host is missing updates announced in advisory GLSA 200710-25.

Change the p2p user's shell to disallow login. For example, as root run the following command: # usermod -s /bin/false p2p NOTE: updating to the current MLDonkey ebuild will not remove this vulnerability, it must be fixed manually. The updated ebuild is to prevent this problem from occurring in the future. http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200710-25 http://bugs.gentoo.org/show_bug.cgi?id=189412

The Gentoo MLDonkey ebuild adds a user to the system with a valid login shell and no password.