CVE-2009-1759
ctorrent - arbitrary code execution
EPSS 14.1%
描述
Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path.
如何修補 CVE-2009-1759
要修補 CVE-2009-1759,請將受影響套件升級到下列已修補版本。
- Debian/ctorrent—升級至 1.3.4-dnh3.2-1.1 或更新版本
- Debian/ctorrent—升級至 1.3.4-dnh3.2-1+lenny1 或更新版本
CVE-2009-1759 正在被利用嗎?
中等 — EPSS 為 14.1%,可持續追蹤但非最高優先。
受影響套件(2)
- from 0, < 1.3.4-dnh3.2-1.1
- from 0, < 1.3.4-dnh3.2-1+lenny1