121 matches found
Debian DSA-2047-1 : aria2 - insufficient input sanitising
A vulnerability was discovered in aria2, a download client. The 'name' attribute of the 'file' element of metalink files is not properly sanitised before using it to download files. If a user is tricked into downloading from a specially crafted metalink file, this can be exploited to download fil...
CVE-2010-1512
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
DEBIAN-CVE-2010-1512
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
Directory traversal
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
CVE-2010-1512
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
CVE-2010-1512
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
CVE-2010-1512
aria2 contains a directory traversal flaw (CVE-2010-1512) that can be triggered via a metalink file’s name attribute to create arbitrary files. Affected versions are before 1.9.3; the issue is fixed in aria2-1.9.3. Open advisories (Gentoo GLSA, openSUSE/SUSE, Fedora) document the vulnerability an...
[SECURITY] [DSA 2047-1] New aria2 packages fix directory traversal
------------------------------------------------------------------------ Debian Security Advisory DSA-2047-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 17, 2010 http://www.debian.org/security/faq -...
Secunia Research: aria2 metalink "name" Directory Traversal Vulnerability
====================================================================== Secunia Research 13/05/2010 - aria2 metalink "name" Directory Traversal Vulnerability - ====================================================================== Table of Contents Affected...
aria2 directory traversal
Directory traversal via metalink files...
DSA-2047-1 aria2 - directory traversal
Bulletin has no description...
Mandriva Update for aria2 MDVA-2010:077 (aria2)
Check for the Version of aria2 OpenVAS Vulnerability Test Mandriva Update for aria2 MDVA-2010:077 aria2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
GLSA-201001-06 : aria2: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201001-06 aria2: Multiple vulnerabilities Tatsuhiro Tsujikawa reported a buffer overflow in DHTRoutingTableDeserializer.cc CVE-2009-3575 and a format string vulnerability in the AbstractCommand::onAbort function in...
Debian DSA-1957-1 : aria2 - buffer overflow
It was discovered that aria2, a high speed download utility, is prone to a buffer overflow in the DHT routing code, which might lead to the execution of arbitrary code. The oldstable distribution etch is not affected by this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Gentoo Security Advisory GLSA 201001-06 (aria2)
The remote host is missing updates announced in advisory GLSA 201001-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 201001-06 (aria2)
The remote host is missing updates announced in advisory GLSA 201001-06. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
aria2: Multiple vulnerabilities
Background aria2 is a download utility with resuming and segmented downloading with HTTP/HTTPS/FTP/BitTorrent support. Description Tatsuhiro Tsujikawa reported a buffer overflow in DHTRoutingTableDeserializer.cc CVE-2009-3575 and a format string vulnerability in the AbstractCommand::onAbort...
Debian: Security Advisory (DSA-1957-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 1957-1] New aria2 packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1957-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 28, 2009 http://www.debian.org/security/faq -...