SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2007-1799

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences,…

MEDIUM 6.4EPSS 2.27%

Does this matter?

Lower severity and a low EPSS score (2.27%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384.

CVSS 2.0
6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
EPSS
2.27% probability · 82th percentile
CISA KEV
Not listed
Affected
joris guisson/ktorrent
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.