Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-2017

Высокий

ALT-PU-2018-2017: package transmission update to version 2.94-alt1.S1

Источник
errata.altlinux.org
Дата публикации
16.07.2018
Дата обновления
16.07.2018
Устраненные уязвимости
1
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades transmission to version 2.94-alt1.S1.

Устраненные уязвимости1

Ссылки1

ALT-PU-2018-2017https://errata.altlinux.org/ALT-PU-2018-2017

Связанные уязвимости

ubuntu логотип

CVE-2018-5702

CVSS3: 8.8
ubuntu
почти 9 лет назад

Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.

nvd логотип

CVE-2018-5702

CVSS3: 8.8
nvd
почти 9 лет назад

Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.

debian логотип

CVE-2018-5702

CVSS3: 8.8
debian
почти 9 лет назад

Transmission through 2.92 relies on X-Transmission-Session-Id (which i ...

github логотип

GHSA-6q4w-fhcp-mhw6

CVSS3: 8.8
github
больше 4 лет назад

Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.