Transmission bittorent client directory traversal
Published:		08.01.2010
Source:		BUGTRAQ
SecurityVulns ID:		10507
Type:		client
Level:		5/10
Description:		Directory traversal via .torrent files.

Affected:		TRANSMISSION : transmission 1.77
CVE:		CVE-2010-0012 (Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file.)

Original document

DEBIAN, [SECURITY] [DSA 1967-1] New transmission packages fix directory traversal (08.01.2010)

Discuss:

Read or add your comments to this news (0 comments)