| Package | Affected versions | Patched versions |
|---|---|---|
| ktorrent | = 2.1.1= 2.1.2 |
Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free