119 matches found
Debian DSA-1815-1 : libtorrent-rasterbar - programming error
It was discovered that the Rasterbar Bittorrent library performed insufficient validation of path names specified in torrent files, which could lead to denial of service by overwriting files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...
[SECURITY] [DSA 1815-1] New libtorrent-rasterbar packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1815-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 14, 2009 http://www.debian.org/security/faq -...
Directory traversal
Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...
DEBIAN-CVE-2009-1760
Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...
CVE-2009-1760
Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...
CVE-2009-1760
Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...
CVE-2009-1760
Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...
CVE-2009-1760
CVE-2009-1760 is a directory traversal issue in Rasterbar libtorrent before 0.14.4, triggered by a dot-dot and partial relative path in a .torrent file’s Multiple File Mode list. A remote attacker could cause a host running affected software (e.g., Deluge, qBittorrent, FireTorrent, etc. using lib...
CVE-2009-1760
Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...
CVE-2009-1760
Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...
CVE-2009-1760: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...
Rasterbar libtorrent arbitrary file overwrite vulnerability
'libtorrent' is an open-source C++ bittorrent library by Rasterbar Software that is used in many desktop applications and embedded devices. Popular BitTorrent clients that use this library are 'firetorrent', 'qBittorrent' and 'deluge Torrent'. For a more comprehensive list of libtorrent-based...
Rasterbar / libtorrent / firetorrent / qBittorrent / deluge Torrent directory traversal
Directory traversal on .torrent files processing...
CVE-2008-0646
The bdecoderecursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attackers to cause a denial of service stack exhaustion and crash via a crafted bencoded message...
Code injection
The bdecoderecursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attackers to cause a denial of service stack exhaustion and crash via a crafted bencoded message...
CVE-2008-0646
The bdecoderecursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attackers to cause a denial of service stack exhaustion and crash via a crafted bencoded message...
CVE-2008-0646
The bdecoderecursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attackers to cause a denial of service stack exhaustion and crash via a crafted bencoded message...
CVE-2008-0646
The CVE-2008-0646 issue affects Rasterbar Software libtorrent (bdecode_recursive in include/libtorrent/bencode.hpp) prior to 0.12.1, as used by Deluge prior to 0.5.8.3 and other products. A crafted bencoded message can cause a denial of service via stack exhaustion and crash. The OpenVAS/Nessus e...
CVE-2008-0646: Improper Restriction of Operations within the Bounds of a Memory Buffer
The bdecoderecursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attackers to cause a denial of service stack exhaustion and crash via a crafted bencoded message...