CVE-2011-1586

CVE-2011-1586 details (from provided docs): A directory traversal vulnerability in KDE’s KGet component (KGetMetalink::File::isValidNameAttr in ui/metalinkcreator/metalinker.cpp) affects KDE SC 4.6.2 and earlier. The issue allows remote attackers to create arbitrary files by using a .. (dot dot) ...

CVE-2011-1586

Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attackers to create arbitrary files via a .. dot dot in the name attribute of a file element in a metalink file. NOTE: this...

Important: Red Hat Security Advisory: kdenetwork security update

Updated kdenetwork packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kdenetwork: incomplete fix for CVE-2010-1000

Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attackers to create arbitrary files via a .. dot dot in the name attribute of a file element in a metalink file. NOTE: this...

kdenetwork security update

7:4.3.4-11.1 - CVE-2010-1000, improper sanitization of metalink attribute for downloading files...

[USN-1114-1] KDENetwork vulnerability

========================================================================== Ubuntu Security Notice USN-1114-1 April 18, 2011 kdenetwork vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

USN-1114-1: KDENetwork vulnerability

It was discovered that KGet did not properly perform input validation when processing metalink files. If a user were tricked into opening a crafted metalink file, a remote attacker could overwrite files via directory traversal, which could eventually lead to arbitrary code execution...

CVE-2011-1586

Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attackers to create arbitrary files via a .. dot dot in the name attribute of a file element in a metalink file. NOTE: this...

aria2: Directory traversal

Background aria2 is a download utility with resuming and segmented downloading with HTTP/HTTPS/FTP/BitTorrent support. Description A directory traversal vulnerability was discovered in aria2. Impact A remote attacker could entice a user to download from a specially crafted metalink file, resultin...

openSUSE Security Update : aria2 (openSUSE-SU-2010:0338-2)

Specially crafted metalink files could trick aria2 into store downloaded files outside of the intended directory CVE-2010-1512. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update aria2-3063. The...

openSUSE Security Update : aria2 (openSUSE-SU-2010:0338-1)

This aria2 update to 1.9.3 fixes a metalink name Directory Traversal issue CVE-2010-1512. The version was also bumped from 1.8.2 to 1.9.3 to fix lots of bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Orbit Downloader metalink 'name' Directory Traversal Vulnerability

This host is installed with Orbit Downloader and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gborbitdownloadermetalinkdirtraversalvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Orbit Downloader metalink 'name' Directory Traversal Vulnerability Authors: Sooraj KS...

Orbit Downloader metalink 'name' Directory Traversal Vulnerability

Orbit Downloader is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2047-1 (aria2)

The remote host is missing an update to aria2 announced via advisory DSA 2047-1. OpenVAS Vulnerability Test $Id: deb20471.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2047-1 aria2 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Fedora Update for aria2 FEDORA-2010-8915

Check for the Version of aria2 OpenVAS Vulnerability Test Fedora Update for aria2 FEDORA-2010-8915 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for aria2 FEDORA-2010-8908

Check for the Version of aria2 OpenVAS Vulnerability Test Fedora Update for aria2 FEDORA-2010-8908 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

CVE-2010-2104

Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via a metalink file containing directory traversal sequences in the name attribute of a file element...

Directory traversal

Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via a metalink file containing directory traversal sequences in the name attribute of a file element...

CVE-2010-2104

Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via a metalink file containing directory traversal sequences in the name attribute of a file element...

Aria2 metalink 'name' Directory Traversal Vulnerability

Aria2 is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...