CVE-2008-5905

Description

The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/46117

https://bugs.gentoo.org/show_bug.cgi?id=244741

http://www.vupen.com/english/advisories/2008/2911

http://www.ubuntu.com/usn/USN-711-1

http://www.securityfocus.com/bid/31927

http://security.gentoo.org/glsa/glsa-200902-05.xml

http://secunia.com/advisories/34003

http://secunia.com/advisories/33675

http://secunia.com/advisories/32447

http://secunia.com/advisories/32442

http://openwall.com/lists/oss-security/2009/01/08/1

http://ktorrent.org/?q=node/23

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3