Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-1760

Опубликовано: 11 июн. 2009
Источник: nvd
CVSS2: 5.8
EPSS Низкий

Описание

Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rasterbar_software:libtorrent:*:*:*:*:*:*:*:*
Версия до 0.14.3 (включая)
cpe:2.3:a:rasterbar_software:libtorrent:0:*:*:*:*:*:*:*
cpe:2.3:a:rasterbar_software:libtorrent:0.12:*:*:*:*:*:*:*
cpe:2.3:a:rasterbar_software:libtorrent:0.12.1:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.0201
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

ubuntu
около 17 лет назад

Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file.

debian
около 17 лет назад

Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar ...

github
больше 4 лет назад

Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file.

EPSS

Процентиль: 79%
0.0201
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-22