Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://security.gentoo.org/glsa/glsa-200907-14.xml | vendor-advisory x_refsource_GENTOO |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/51008 | vdb-entry x_refsource_XF |
| http://www.mandriva.com/security/advisories?name=MDVSA-2009:139 | vendor-advisory x_refsource_MANDRIVA |
| http://secunia.com/advisories/35277 | third-party-advisory x_refsource_SECUNIA |
| http://secunia.com/advisories/35848 | third-party-advisory x_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2009/1534 | vdb-entry x_refsource_VUPEN |
| http://www.securityfocus.com/bid/35262 | vdb-entry x_refsource_BID |
| http://census-labs.com/news/2009/06/08/libtorrent-rasterbar/ | x_refsource_MISC |
| http://www.debian.org/security/2009/dsa-1815 | vendor-advisory x_refsource_DEBIAN |
| http://sourceforge.net/project/shownotes.php?group_id=79942&release_id=686456 | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/504151/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|