NetSight
high8.8

CVE-2010-0012

Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files…

Impact

Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file.

Affected products

VendorProductAffected versions
TransmissionbtTransmission
Versions 1.22, 1.34, 1.75, 1.76
DebianDebian Linux
Version 5.0
OpensuseOpensuse
Versions 11.0, 11.1, 11.2

Weakness classification

References