transmissionbt transmission 1.22 vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote malicious users to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file.

Transmissionbt Transmission 1.22 Transmissionbt Transmission 1.75 Transmissionbt Transmission 1.76 Transmissionbt Transmission 1.34 Debian Debian Linux 5.0 Opensuse Opensuse 11.1 Opensuse Opensuse 11.0 Opensuse Opensuse 11.2

Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission prior to 2.61 allow remote malicious users to inject arbitrary web script or HTML via the (1) comment, (2) created by, or (3) name field in a torrent file.

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission prior to 2.74 and possibly other products, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via crafted "micro transport protocol packets."

Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission prior to 2.84 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook