CVE-2007-1799

2007-04-0200:00:00

ubuntu.com

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.014 Low

EPSS

Percentile

86.5%

JSON

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3
only checks for the “…” string, which allows remote attackers to overwrite
arbitrary files via modified “…” sequences in a torrent filename, as
demonstrated by “…/” sequences, due to an incomplete fix for
CVE-2007-1384.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchktorrent< 1.2-0ubuntu5.2UNKNOWN
ubuntu6.10noarchktorrent< 2.0.3+dfsg1-0ubuntu1.2UNKNOWN
ubuntu7.04noarchktorrent< 2.1-0ubuntu2.1UNKNOWN