>> KTorrent Filename Directory Traversal and Message Handling Denial of Service Issues
Title : KTorrent Filename Directory Traversal and Message Handling Denial of Service Issues VUPEN ID : VUPEN/ADV-2007-0913 CVE ID : CVE-2007-1384 - CVE-2007-1385 - CVE-2007-1799
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-03-13
Technical Description
Two vulnerabilities have been identified in KTorrent, which could be exploited by attackers to cause a denial of service or potentially execute arbitrary commands.
The first issue is due to an input validation error when processing paths of filenames, which could be exploited to overwrite arbitrary files via directory traversal attacks by tricking a user into opening a malicious torrent.
The second vulnerability is due to an error when handling messages with malformed chunk indexes, which could be exploited by attackers to crash an affected application or potentially compromise a vulnerable system.
