CVE-2010-2452 Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unknown vectors.
HighCVSS 9.3
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kvirc | = 3.4.0 | No fix listed |
| kvirc | = 4.0 | No fix listed |
| debian/kvirc(Debian:12) | < 4:4.0.0~svn4340+rc3-1 | 4:4.0.0~svn4340+rc3-1 |
| debian/kvirc(Debian:13) | < 4:4.0.0~svn4340+rc3-1 | 4:4.0.0~svn4340+rc3-1 |
| debian/kvirc(Debian:14) | < 4:4.0.0~svn4340+rc3-1 | 4:4.0.0~svn4340+rc3-1 |
References
- FEDORA-2010-10522 vendor-advisory
- FEDORA-2010-10529 vendor-advisory
- [KVIrc] 20100517 Proposal for a stable release of kvirc4 mailing-list
- SUSE-SR:2010:014 vendor-advisory
- 32410 third-party-advisory vendor-advisory
- 40349 third-party-advisory vendor-advisory
- DSA-2065 patch vendor-advisory
- 40746 patch vdb-entry
- ADV-2010-1602 vdb-entry vendor-advisory
- Debian Security Tracker CVE-2010-2452 vendor-advisory