PT-2006-7206 · Torrentflux · Torrentflux

R0Ut3R · Publicado 2006-12-15 · Atualizado 2017-10-19 · CVE-2006-6604

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TorrentFlux version 2.2

Description A directory traversal issue exists, allowing remote authenticated users to read arbitrary files. This is achieved by using .. (dot dot) sequences in the alias parameter of the downloaddetails.php file.

Recommendations For TorrentFlux version 2.2, restrict access to the downloaddetails.php file until a patch is available, and avoid using the alias parameter with .. sequences to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-6604

Produtos afetados

Torrentflux

Referências · 6

• 🔥 https://exploit-db.com/exploits/2902 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6604 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30831 · Nota
• http://secunia.com/advisories/23270 · Nota
• http://securityfocus.com/bid/21525 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6604 · Nota