CVEvulnerability

CVE-2010-1512

4.3 MEDIUM Published 2010-05-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-05-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-22

Description

Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

Affected configurations

• tatsuhiro tsujikawa aria2 (<= 1.9.2) • tatsuhiro tsujikawa aria2 0.1.0 • tatsuhiro tsujikawa aria2 0.2.0 • tatsuhiro tsujikawa aria2 0.2.1 • tatsuhiro tsujikawa aria2 0.2.1\+1 • tatsuhiro tsujikawa aria2 0.2.1\+2 • tatsuhiro tsujikawa aria2 0.3.0 • tatsuhiro tsujikawa aria2 0.3.1 • tatsuhiro tsujikawa aria2 0.3.1\+1 • tatsuhiro tsujikawa aria2 0.3.1\+2 • tatsuhiro tsujikawa aria2 0.3.2 • tatsuhiro tsujikawa aria2 0.4.0 • tatsuhiro tsujikawa aria2 0.4.1 • tatsuhiro tsujikawa aria2 0.5.0 • tatsuhiro tsujikawa aria2 0.5.0\+1 • tatsuhiro tsujikawa aria2 0.5.0\+2 • tatsuhiro tsujikawa aria2 0.5.1 • tatsuhiro tsujikawa aria2 0.5.2 • tatsuhiro tsujikawa aria2 0.6.0 • tatsuhiro tsujikawa aria2 0.6.0\+1 • tatsuhiro tsujikawa aria2 0.7.0 • tatsuhiro tsujikawa aria2 0.7.1 • tatsuhiro tsujikawa aria2 0.7.2 • tatsuhiro tsujikawa aria2 0.7.3 • tatsuhiro tsujikawa aria2 0.8.0 • tatsuhiro tsujikawa aria2 0.8.1 • tatsuhiro tsujikawa aria2 0.9.0 • tatsuhiro tsujikawa aria2 0.10.0 • tatsuhiro tsujikawa aria2 0.10.0\+1 • tatsuhiro tsujikawa aria2 0.10.1 • tatsuhiro tsujikawa aria2 0.10.2 • tatsuhiro tsujikawa aria2 0.10.2\+1 • tatsuhiro tsujikawa aria2 0.11.0 • tatsuhiro tsujikawa aria2 0.11.1 • tatsuhiro tsujikawa aria2 0.11.1\+1 • tatsuhiro tsujikawa aria2 0.11.2 • tatsuhiro tsujikawa aria2 0.11.3 • tatsuhiro tsujikawa aria2 0.11.4 • tatsuhiro tsujikawa aria2 0.11.5 • tatsuhiro tsujikawa aria2 0.12.0 • tatsuhiro tsujikawa aria2 0.12.1 • tatsuhiro tsujikawa aria2 0.13.0 • tatsuhiro tsujikawa aria2 0.13.0\+1 • tatsuhiro tsujikawa aria2 0.13.1 • tatsuhiro tsujikawa aria2 0.13.1\+1 • tatsuhiro tsujikawa aria2 0.13.1\+2 • tatsuhiro tsujikawa aria2 0.13.2 • tatsuhiro tsujikawa aria2 0.13.2\+1 • tatsuhiro tsujikawa aria2 0.14.0 • tatsuhiro tsujikawa aria2 0.14.0\+1 • tatsuhiro tsujikawa aria2 0.15.0 • tatsuhiro tsujikawa aria2 0.15.1 • tatsuhiro tsujikawa aria2 0.15.1\+1 • tatsuhiro tsujikawa aria2 0.15.1\+2 • tatsuhiro tsujikawa aria2 0.15.2 • tatsuhiro tsujikawa aria2 0.15.3 • tatsuhiro tsujikawa aria2 0.16.0 • tatsuhiro tsujikawa aria2 0.16.1 • tatsuhiro tsujikawa aria2 0.16.2 • tatsuhiro tsujikawa aria2 1.0.0 … and 28 more

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References