CVE-2009-1757

2009-05-2211:52:40

Debian Security Bug Tracker

security-tracker.debian.org

cve-2009-1757

transmission

csrf

vulnerability

hijack

authentication

remote attackers

unspecified victims

unknown vectors

unix

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.001

Percentile

39.7%

JSON

Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

OSVersionArchitecturePackageVersionFilename
Debian12alltransmission< 1.61-1transmission_1.61-1_all.deb
Debian11alltransmission< 1.61-1transmission_1.61-1_all.deb
Debian999alltransmission< 1.61-1transmission_1.61-1_all.deb
Debian13alltransmission< 1.61-1transmission_1.61-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	transmission	< 1.61-1	transmission_1.61-1_all.deb
Debian	11	all	transmission	< 1.61-1	transmission_1.61-1_all.deb
Debian	999	all	transmission	< 1.61-1	transmission_1.61-1_all.deb
Debian	13	all	transmission	< 1.61-1	transmission_1.61-1_all.deb