CVE-2010-0012
Fixed in a distro release EPSS 4%
Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file.
Products: transmissionbt transmission, debian_linux, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | transmission | 1.77-1 |
| Debian 13 | transmission | 1.77-1 |
| Debian 14 | transmission | 1.77-1 |
| Debian 5.0 | transmission | 1.22-1+lenny2 |