Test ID:	1.3.6.1.4.1.25623.1.0.64252
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1817-1)
Summary:	The remote host is missing an update for the Debian 'ctorrent' package(s) announced via the DSA-1817-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'ctorrent' package(s) announced via the DSA-1817-1 advisory. Vulnerability Insight: Michael Brooks discovered that ctorrent, a text-mode bittorrent client, does not verify the length of file paths in torrent files. An attacker can exploit this via a crafted torrent that contains a long file path to execute arbitrary code with the rights of the user opening the file. The oldstable distribution (etch) does not contain ctorrent. For the stable distribution (lenny), this problem has been fixed in version 1.3.4-dnh3.2-1+lenny1. For the testing distribution (squeeze), this problem will be fixed soon. For the unstable distribution (sid), this problem has been fixed in version 1.3.4-dnh3.2-1.1. We recommend that you upgrade your ctorrent packages. Affected Software/OS: 'ctorrent' package(s) on Debian 5. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1759 BugTraq ID: 34584 http://www.securityfocus.com/bid/34584 Debian Security Information: DSA-1817 (Google Search) http://www.debian.org/security/2009/dsa-1817 https://www.exploit-db.com/exploits/8470 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01010.html https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01102.html http://www.openwall.com/lists/oss-security/2009/05/20/3 http://secunia.com/advisories/34752 http://secunia.com/advisories/35499 http://secunia.com/advisories/36471 http://www.vupen.com/english/advisories/2009/1092 XForce ISS Database: ctorrent-btfiles-bo(49959) https://exchange.xforce.ibmcloud.com/vulnerabilities/49959
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.