CVE-2007-1385

Related Files

Gentoo Linux Security Advisory 200705-1

Posted May 3, 2007

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200705-01 - Bryan Burns of Juniper Networks discovered a vulnerability in chunkcounter.cpp when processing large or negative idx values, and a directory traversal vulnerability in torrent.cpp. Versions less than 2.1.3 are affected.

tags | advisory

systems | linux, gentoo, juniper

advisories | CVE-2007-1384, CVE-2007-1385, CVE-2007-1799

SHA-256 | b57efc215d1526e13a88dad0980b79388b365f50a3326ebe8a381ad5c7ef0948

Download | Favorite | View

Ubuntu Security Notice 436-1

Posted Mar 14, 2007

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 436-1 - Bryan Burns of Juniper Networks discovered that KTorrent did not correctly validate the destination file paths nor the HAVE statements sent by torrent peers. A malicious remote peer could send specially crafted messages to overwrite files or execute arbitrary code with user privileges.

tags | advisory, remote, arbitrary

systems | linux, juniper, ubuntu

advisories | CVE-2007-1384, CVE-2007-1385

SHA-256 | c6a9911f676c52c44f13fff3ea2c268d124e8d46002028af110bf993cb7c6a6a

Download | Favorite | View