Lucene search

K
gentooGentoo FoundationGLSA-201101-04
HistoryJan 15, 2011 - 12:00 a.m.

aria2: Directory traversal

2011-01-1500:00:00
Gentoo Foundation
security.gentoo.org
8

0.007 Low

EPSS

Percentile

79.8%

Background

aria2 is a download utility with resuming and segmented downloading with HTTP/HTTPS/FTP/BitTorrent support.

Description

A directory traversal vulnerability was discovered in aria2.

Impact

A remote attacker could entice a user to download from a specially crafted metalink file, resulting in the creation of arbitrary files.

Workaround

There is no known workaround at this time.

Resolution

All aria2 users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-misc/aria2-1.9.3"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-misc/aria2< 1.9.3UNKNOWN