CVE-2010-0999

Free Download Manager (FDM) prior to 3.0.852 is vulnerable to a directory-traversal issue in the metalink file’s file element name attribute, allowing remote attackers to create arbitrary files. The stated impact is arbitrary file creation (path traversal). OpenVAS and Secunia references corrobor...

Secunia Research: Free Download Manager metalink "name" Directory Traversal

====================================================================== Secunia Research 13/05/2010 - Free Download Manager metalink "name" Directory Traversal - ====================================================================== Table of Contents Affected...