ID de Prueba:	1.3.6.1.4.1.25623.1.0.64285
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2009:139 (libtorrent-rasterbar)
Resumen:	The remote host is missing an update to libtorrent-rasterbar;announced via advisory MDVSA-2009:139.
Descripción:	Summary: The remote host is missing an update to libtorrent-rasterbar announced via advisory MDVSA-2009:139. Vulnerability Insight: A security vulnerability has been identified and corrected in libtorrent-rasterbar: Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in Multiple File Mode list element in a .torrent file (CVE-2009-1760). The updated packages have been patched to prevent this. Affected: 2009.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1760 BugTraq ID: 35262 http://www.securityfocus.com/bid/35262 Bugtraq: 20090608 Rasterbar libtorrent arbitrary file overwrite vulnerability (Google Search) http://www.securityfocus.com/archive/1/504151/100/0/threaded Debian Security Information: DSA-1815 (Google Search) http://www.debian.org/security/2009/dsa-1815 http://security.gentoo.org/glsa/glsa-200907-14.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:139 http://census-labs.com/news/2009/06/08/libtorrent-rasterbar/ http://secunia.com/advisories/35277 http://secunia.com/advisories/35848 http://www.vupen.com/english/advisories/2009/1534 XForce ISS Database: libtorrent-path-element-dir-traversal(51008) https://exchange.xforce.ibmcloud.com/vulnerabilities/51008
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.