CVE-2009-1760
- State
- Published
- Severity
- Not scored
- Published
- Jun 11, 2009
- Updated
- Aug 7, 2024
- Reserved
- May 21, 2009
Description
Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- GLSA-200907-14vendor-advisory
- libtorrent-path-element-dir-traversal(51008)vdb-entry
- MDVSA-2009:139vendor-advisory
- 35277third-party-advisory
- 35848third-party-advisory
- ADV-2009-1534vdb-entry
- 35262vdb-entry
- http://census-labs.com/news/2009/06/08/libtorrent-rasterbar/
- DSA-1815vendor-advisory
- http://sourceforge.net/project/shownotes.php?group_id=79942&release_id=686456
- 20090608 Rasterbar libtorrent arbitrary file overwrite vulnerabilitymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.