CVE-2009-1759
ctorrent - arbitrary code execution
EPSS 14.1%
Description
Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path.
How to fix CVE-2009-1759
To remediate CVE-2009-1759, upgrade the affected package to a fixed version below.
- Debian/ctorrent—upgrade to 1.3.4-dnh3.2-1.1 or later
- Debian/ctorrent—upgrade to 1.3.4-dnh3.2-1+lenny1 or later
Is CVE-2009-1759 being exploited?
Moderate — EPSS is 14.1%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (2)
- from 0, < 1.3.4-dnh3.2-1.1
- from 0, < 1.3.4-dnh3.2-1+lenny1