Kde · Ktorrent · CVE-2007-1799
Name of the Vulnerable Software and Affected Versions:
KTorrent versions prior to 2.1.3
Description:
A directory traversal issue exists due to incomplete validation of torrent filenames, allowing remote attackers to overwrite arbitrary files by using modified ".." sequences. This can be achieved with "../" sequences in a torrent filename.
Recommendations:
For versions prior to 2.1.3, update to version 2.1.3 or later to resolve the issue. As a temporary workaround, consider restricting the handling of torrent filenames to prevent the use of "../" sequences until a patch is applied.