Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-436-1
HistoryMar 13, 2007 - 12:00 a.m.

KTorrent vulnerabilities

2007-03-1300:00:00
ubuntu.com
40

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.059 Low

EPSS

Percentile

93.5%

JSON

Releases

  • Ubuntu 6.10
  • Ubuntu 6.06

Details

Bryan Burns of Juniper Networks discovered that KTorrent did not
correctly validate the destination file paths nor the HAVE statements
sent by torrent peers. A malicious remote peer could send specially
crafted messages to overwrite files or execute arbitrary code with user
privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchktorrent< 2.0.3+dfsg1-0ubuntu1.1UNKNOWN
Ubuntu6.06noarchktorrent< 1.2-0ubuntu5.1UNKNOWN

Related

openvas 8
nessus 6
freebsd 1
slackware 1
gentoo 1
securityvulns 1
prion 3
debiancve 3
ubuntucve 3
cvelist 3
nvd 3
cve 3
openvas
openvas
Ubuntu: Security Advisory (USN-436-1)
2009-03-23 00:00:00
FreeBSD Ports: ktorrent
2008-09-04 00:00:00
FreeBSD Ports: ktorrent
2008-09-04 00:00:00
nessus
nessus
FreeBSD : ktorrent -- multiple vulnerabilities (73f53712-d028-11db-8c07-0211d85f11fb)
2007-03-12 00:00:00
Slackware 11.0 / current : ktorrent (SSA:2007-093-02)
2007-04-05 00:00:00
Ubuntu 6.06 LTS / 6.10 : ktorrent vulnerabilities (USN-436-1)
2007-11-10 00:00:00
freebsd
freebsd
ktorrent -- multiple vulnerabilities
2007-03-09 00:00:00
slackware
slackware
[slackware-security] ktorrent
2007-04-03 23:23:09
gentoo
gentoo
Ktorrent: Multiple vulnerabilities
2007-05-01 00:00:00
securityvulns
securityvulns
Ktorrent multiple security vulnerabilities
2007-03-12 00:00:00
prion
prion
Directory traversal
2007-03-10 18:19:00
Design/Logic Flaw
2007-03-10 18:19:00
Directory traversal
2007-04-02 22:19:00
debiancve
debiancve
CVE-2007-1385
2007-03-10 18:19:00
CVE-2007-1384
2007-03-10 18:19:00
CVE-2007-1799
2007-04-02 22:19:00
ubuntucve
ubuntucve
CVE-2007-1384
2007-03-10 00:00:00
CVE-2007-1385
2007-03-10 00:00:00
CVE-2007-1799
2007-04-02 00:00:00
cvelist
cvelist
CVE-2007-1385
2007-03-10 18:00:00
CVE-2007-1384
2007-03-10 18:00:00
CVE-2007-1799
2007-04-02 22:00:00
nvd
nvd
CVE-2007-1385
2007-03-10 18:19:00
CVE-2007-1384
2007-03-10 18:19:00
CVE-2007-1799
2007-04-02 22:19:00
cve
cve
CVE-2007-1385
2007-03-10 18:19:00
CVE-2007-1384
2007-03-10 18:19:00
CVE-2007-1799
2007-04-02 22:19:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.059 Low

EPSS

Percentile

93.5%

JSON
Related for USN-436-1
openvas8nessus6freebsd1slackware1gentoo1securityvulns1prion3debiancve3ubuntucve3cvelist3nvd3cve3