CVE-2007-1799 Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a t...
MediumCVSS 6.4
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joris guisson ktorrent | = 2.1.1 | No fix listed |
| joris guisson ktorrent | = 2.1.2 | No fix listed |
| debian/ktorrent(Debian:12) | < 2.1.4.dfsg.1-1 | 2.1.4.dfsg.1-1 |
| debian/ktorrent(Debian:13) | < 2.1.4.dfsg.1-1 | 2.1.4.dfsg.1-1 |
| debian/ktorrent(Debian:14) | < 2.1.4.dfsg.1-1 | 2.1.4.dfsg.1-1 |
References
- bugs.kde.org
- 24995 third-party-advisory
- 25097 third-party-advisory
- 26773 third-party-advisory
- GLSA-200705-01 vendor-advisory
- DSA-1373 vendor-advisory
- MDKSA-2007:095 vendor-advisory
- SUSE-SR:2007:007 vendor-advisory
- 23745 vdb-entry
- USN-436-2 vendor-advisory
- bugs.gentoo.org
- ktorrent-torrentcpp-directory-traversal(33566) vdb-entry
- Debian Security Tracker CVE-2007-1799 vendor-advisory
- bugs.debian.org issue-tracking