Gentoo Security Advisory GLSA 200907-14 (rb_libtorrent deluge)

The remote host is missing updates announced in advisory GLSA 200907-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200907-14 : Rasterbar libtorrent: Directory traversal

The remote host is affected by the vulnerability described in GLSA-200907-14 Rasterbar libtorrent: Directory traversal census reported a directory traversal vulnerability in src/torrentinfo.cpp that can be triggered via .torrent files. Impact : A remote attacker could entice a user or automated...

Rasterbar libtorrent: Directory traversal

Background Rasterbar libtorrent is a C++ BitTorrent implementation focusing on efficiency and scalability. Deluge is a BitTorrent client that ships a copy of libtorrent. Description census reported a directory traversal vulnerability in src/torrentinfo.cpp that can be triggered via .torrent files...

Mandrake Security Advisory MDVSA-2009:139 (libtorrent-rasterbar)

The remote host is missing an update to libtorrent-rasterbar announced via advisory MDVSA-2009:139. OpenVAS Vulnerability Test $Id: mdksa2009139.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:139 libtorrent-rasterbar Authors: Thomas Reinke Copyright...

Mandrake Security Advisory MDVSA-2009:139 (libtorrent-rasterbar)

The remote host is missing an update to libtorrent-rasterbar announced via advisory MDVSA-2009:139. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fedora Core 9 FEDORA-2009-6682 (deluge)

The remote host is missing an update to deluge announced via advisory FEDORA-2009-6682. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 9 : deluge-0.5.9.3-2.fc9 (2009-6682)

This release adds a backported upstream patch to fix a directory traversal vulnerability in the included copy of libtorrent which would allow a remote attacker to create or overwrite arbitrary files via a '..' dot dot and partial relative pathname in a specially crafted torrent. Note that Tenable...

Debian Security Advisory DSA 1815-1 (libtorrent-rasterbar)

The remote host is missing an update to libtorrent-rasterbar announced via advisory DSA 1815-1. OpenVAS Vulnerability Test $Id: deb18151.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1815-1 libtorrent-rasterbar Authors: Thomas Reinke Copyright: Copyright ...

Debian: Security Advisory (DSA-1815-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1815-1 : libtorrent-rasterbar - programming error

It was discovered that the Rasterbar Bittorrent library performed insufficient validation of path names specified in torrent files, which could lead to denial of service by overwriting files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

[SECURITY] [DSA 1815-1] New libtorrent-rasterbar packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1815-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 14, 2009 http://www.debian.org/security/faq -...

Directory traversal

Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...

CVE-2009-1760

Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...

DEBIAN-CVE-2009-1760

Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...

CVE-2009-1760

Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...

CVE-2009-1760

Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...

CVE-2009-1760

CVE-2009-1760 is a directory traversal issue in Rasterbar libtorrent before 0.14.4, triggered by a dot-dot and partial relative path in a .torrent file’s Multiple File Mode list. A remote attacker could cause a host running affected software (e.g., Deluge, qBittorrent, FireTorrent, etc. using lib...

CVE-2009-1760

Directory traversal vulnerability in src/torrentinfo.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. dot dot and partial relative pathname in a Multiple...

Rasterbar libtorrent arbitrary file overwrite vulnerability

'libtorrent' is an open-source C++ bittorrent library by Rasterbar Software that is used in many desktop applications and embedded devices. Popular BitTorrent clients that use this library are 'firetorrent', 'qBittorrent' and 'deluge Torrent'. For a more comprehensive list of libtorrent-based...

Rasterbar / libtorrent / firetorrent / qBittorrent / deluge Torrent directory traversal

Directory traversal on .torrent files processing...