CVE-2007-1384 Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrary files via ".." sequences in a torrent filename.
MediumCVSS 6.4
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrary files via ".." sequences in a torrent filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joris guisson ktorrent | <= 2.1.1 | No fix listed |
| debian/ktorrent(Debian:12) | < 2.0.3+dfsg1-2.1 | 2.0.3+dfsg1-2.1 |
| debian/ktorrent(Debian:13) | < 2.0.3+dfsg1-2.1 | 2.0.3+dfsg1-2.1 |
| debian/ktorrent(Debian:14) | < 2.0.3+dfsg1-2.1 | 2.0.3+dfsg1-2.1 |
References
- ktorrent.org
- [kde-announce] 20070309 KTorrent 2.1.2 is out mailing-list vendor-advisory
- 24459 third-party-advisory
- 24486 third-party-advisory
- 24753 third-party-advisory
- 24995 third-party-advisory
- 25097 third-party-advisory
- GLSA-200705-01 vendor-advisory
- SSA:2007-093-02 vendor-advisory
- SUSE-SR:2007:007 vendor-advisory
- 22930 vdb-entry
- 1017747 vdb-entry
- USN-436-1 vendor-advisory
- ADV-2007-0913 vdb-entry
- launchpad.net
- Debian Security Tracker CVE-2007-1384 vendor-advisory
- bugs.debian.org issue-tracking