CVEvulnerability
CVE-2008-5905
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-01-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request.
Affected configurations
• ktorrent ktorrent (<= 3.1.3)
• ktorrent ktorrent 0.9
• ktorrent ktorrent 1.0
• ktorrent ktorrent 1.1
• ktorrent ktorrent 1.2
• ktorrent ktorrent 2.0
• ktorrent ktorrent 2.0.1
• ktorrent ktorrent 2.0.2
• ktorrent ktorrent 2.0.3
• ktorrent ktorrent 2.1
• ktorrent ktorrent 2.1.1
• ktorrent ktorrent 2.1.2
• ktorrent ktorrent 2.1.3
• ktorrent ktorrent 2.1.4
• ktorrent ktorrent 2.2
• ktorrent ktorrent 2.2.1
• ktorrent ktorrent 2.2.2
• ktorrent ktorrent 2.2.3
• ktorrent ktorrent 2.2.4
• ktorrent ktorrent 2.2.5
• ktorrent ktorrent 2.2.6
• ktorrent ktorrent 2.2.7
• ktorrent ktorrent 2.2.8
• ktorrent ktorrent 3.0
• ktorrent ktorrent 3.0.0
• ktorrent ktorrent 3.0.1
• ktorrent ktorrent 3.0.2
• ktorrent ktorrent 3.1.1
• ktorrent ktorrent 3.1.2
Related
Weakness · not in database (1)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178 bugs.debian.org
- http://ktorrent.org/?q=node/23 Vendor Advisory
- http://openwall.com/lists/oss-security/2009/01/08/1 openwall.com
- http://secunia.com/advisories/32442 Vendor Advisory
- http://secunia.com/advisories/32447 Vendor Advisory
- http://secunia.com/advisories/33675 secunia.com
- http://secunia.com/advisories/34003 secunia.com
- http://security.gentoo.org/glsa/glsa-200902-05.xml security.gentoo.org
- http://www.securityfocus.com/bid/31927 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-711-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2008/2911 www.vupen.com
- https://bugs.gentoo.org/show_bug.cgi?id=244741 bugs.gentoo.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46117 exchange.xforce.ibmcloud.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178 bugs.debian.org
- http://ktorrent.org/?q=node/23 Vendor Advisory
- http://openwall.com/lists/oss-security/2009/01/08/1 openwall.com
- http://secunia.com/advisories/32442 Vendor Advisory
- http://secunia.com/advisories/32447 Vendor Advisory
- http://secunia.com/advisories/33675 secunia.com
- http://secunia.com/advisories/34003 secunia.com
- http://security.gentoo.org/glsa/glsa-200902-05.xml security.gentoo.org
- http://www.securityfocus.com/bid/31927 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-711-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2008/2911 www.vupen.com
- https://bugs.gentoo.org/show_bug.cgi?id=244741 bugs.gentoo.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46117 exchange.xforce.ibmcloud.com