241 matches found
CVE-2010-1000
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
CVE-2010-1511
KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file...
DEBIAN-CVE-2010-1512
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
CVE-2010-1512
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
Cross site request forgery (csrf)
KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file...
Directory traversal
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
Directory traversal
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
Directory traversal
Directory traversal vulnerability in Free Download Manager FDM before 3.0.852 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
CVE-2010-1000
CVE-2010-1000 affects KDE SC KGet (KDENETWORK) with directory traversal in the metalink file’s name attribute, enabling remote attackers to create arbitrary files via crafted metalink entries. Affected: KDE SC 4.0.0–4.4.3; vulnerability in KGetMetalink::File::isValidNameAttr. Impact: potential ar...
CVE-2010-0999
Directory traversal vulnerability in Free Download Manager FDM before 3.0.852 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
CVE-2010-1511
CVE-2010-1511 affects KGet 2.4.2 within KDE SC 4.0.0–4.4.3. The flaw arises from not properly requesting download confirmation when processing a metalink, enabling a remote attacker to overwrite arbitrary files via a crafted metalink. CVSS metrics from NVD indicate Network access, Low attack comp...
CVE-2010-1512
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
CVE-2010-1511
KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file...
CVE-2010-1000
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
CVE-2010-0999
Free Download Manager (FDM) prior to 3.0.852 is vulnerable to a directory-traversal issue in the metalink file’s file element name attribute, allowing remote attackers to create arbitrary files. The stated impact is arbitrary file creation (path traversal). OpenVAS and Secunia references corrobor...
CVE-2010-1512
aria2 contains a directory traversal flaw (CVE-2010-1512) that can be triggered via a metalink file’s name attribute to create arbitrary files. Affected versions are before 1.9.3; the issue is fixed in aria2-1.9.3. Open advisories (Gentoo GLSA, openSUSE/SUSE, Fedora) document the vulnerability an...
CVE-2010-1512
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file...
[SECURITY] [DSA 2047-1] New aria2 packages fix directory traversal
------------------------------------------------------------------------ Debian Security Advisory DSA-2047-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 17, 2010 http://www.debian.org/security/faq -...
Secunia Research: aria2 metalink "name" Directory Traversal Vulnerability
====================================================================== Secunia Research 13/05/2010 - aria2 metalink "name" Directory Traversal Vulnerability - ====================================================================== Table of Contents Affected...