CVE-2009-1760

Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file.

Date published : 2009-06-11

http://www.securityfocus.com/bid/35262

http://www.securityfocus.com/archive/1/504151/100/0/threaded