HIGH
Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .
Published Jan 8, 2010
8.8
HIGHCVSS 3.1
EPSS 4.19%
Description
Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file.
Affected products
No data.
Configuration 1
OR
- 1.22
- 1.34
- 1.75
- 1.76
Configuration 2
- 5.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (13)
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html vendor-advisoryx_refsource_SUSEMailing List
- http://secunia.com/advisories/37993 third-party-advisoryx_refsource_SECUNIABroken Link
- http://secunia.com/advisories/38005 third-party-advisoryx_refsource_SECUNIABroken Link
- http://security.debian.org/pool/updates/main/t/transmission/transmission_1.22-1+lenny2.diff.gz x_refsource_CONFIRMBroken Link
- http://trac.transmissionbt.com/changeset/9829/ x_refsource_CONFIRMPatch
- http://trac.transmissionbt.com/wiki/Changes#version-1.77 x_refsource_CONFIRMBroken Link
- http://www.debian.org/security/2010/dsa-1967 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- http://www.mail-archive.com/debian-devel-changes%40lists.debian.org/msg264483.html mailing-listx_refsource_MLISTPatch
- http://www.openwall.com/lists/oss-security/2010/01/06/2 mailing-listx_refsource_MLISTMailing List
- http://www.openwall.com/lists/oss-security/2010/01/06/4 mailing-listx_refsource_MLISTMailing List
- http://www.vupen.com/english/advisories/2010/0071 vdb-entryx_refsource_VUPENPermissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55454 vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry
- https://launchpad.net/bugs/500625 x_refsource_CONFIRMIssue TrackingPatch
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jan 8, 2010
Updated Aug 7, 2024
Reserved Dec 14, 2009
Link CVE-2010-0012
CISA Vulnrichment
Updated n/a