CVE-2007-1799
Last modified
CVE-2007-1799 is a vulnerability of currently unknown severity. Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384.. EPSS estimates a 2.27% chance of exploitation in the next 30 days.
Description
Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Joris Guisson | Ktorrent | 2.1.1 |
| Joris Guisson | Ktorrent | 2.1.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-1799?
How severe is CVE-2007-1799?
How do I fix CVE-2007-1799?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-1793SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0…
- CVE-2007-1794The Javascript engine in Mozilla 1.7 and earlier on Sun Sola…
- CVE-2007-1795JCcorp URLshrink 1.3.1 allows remote attackers to execute ar…
- CVE-2007-1796Multiple unspecified vulnerabilities in JCcorp URLshrink bef…
- CVE-2007-1797Multiple integer overflows in ImageMagick before 6.3.3-5 all…
- CVE-2007-1798Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 …
- CVE-2007-1800Cisco Secure ACS does not require authentication when Cisco …
- CVE-2007-1801Directory traversal vulnerability in inc/lang.php in sBLOG 0…
- CVE-2007-1802Cross-site scripting (XSS) vulnerability in MailDwarf 3.01 a…
- CVE-2007-1803Unspecified vulnerability in MailDwarf 3.01 and earlier allo…
- CVE-2007-1804PulseAudio 0.9.5 allows remote attackers to cause a denial o…
- CVE-2007-1805SQL injection vulnerability in genre.php in the debaser 0.92…
Are you affected by CVE-2007-1799?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST