CVE-2008-5905

The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ktorrent:ktorrent:*:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:0.9:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:1.0:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:1.1:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:1.2:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:1.2:rc1:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:1.2:rc2:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.0:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.0:beta1:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.0:rc1:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.1:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.1:beta1:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.1:rc1:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.2:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.2:beta1:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.2:rc1:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.2.2:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.2.4:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.2.5:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.2.6:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.2.7:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:2.2.8:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:3.0:beta1:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:3.0:rc1:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ktorrent:ktorrent:3.1.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2009-01-15 17:30

Updated : 2024-02-04 17:33


NVD link : CVE-2008-5905

Mitre link : CVE-2008-5905

CVE.ORG link : CVE-2008-5905


JSON object : View

Products Affected

ktorrent

  • ktorrent
CWE
CWE-264

Permissions, Privileges, and Access Controls