CVE-2009-1760

2009-06-1121:30:00

CWE-22

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.005

Percentile

77.2%

JSON

Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a … (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file.

Affected configurations

Nvd

Node

rasterbar_softwarelibtorrentRange≤0.14.3

rasterbar_softwarelibtorrentMatch0

rasterbar_softwarelibtorrentMatch0.12

rasterbar_softwarelibtorrentMatch0.12.1

VendorProductVersionCPE
rasterbar_softwarelibtorrent*cpe:2.3:a:rasterbar_software:libtorrent:*:*:*:*:*:*:*:*
rasterbar_softwarelibtorrent0cpe:2.3:a:rasterbar_software:libtorrent:0:*:*:*:*:*:*:*
rasterbar_softwarelibtorrent0.12cpe:2.3:a:rasterbar_software:libtorrent:0.12:*:*:*:*:*:*:*
rasterbar_softwarelibtorrent0.12.1cpe:2.3:a:rasterbar_software:libtorrent:0.12.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rasterbar_software	libtorrent	*	cpe:2.3:a:rasterbar_software:libtorrent::::::::
rasterbar_software	libtorrent	0	cpe:2.3:a:rasterbar_software:libtorrent:0:::::::*
rasterbar_software	libtorrent	0.12	cpe:2.3:a:rasterbar_software:libtorrent:0.12:::::::*
rasterbar_software	libtorrent	0.12.1	cpe:2.3:a:rasterbar_software:libtorrent:0.12.1:::::::*