Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2008-5905

Date: January 15, 2009

The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request.

Severity Score

Related Resources (16)

http://secunia.com/advisories/32442
http://secunia.com/advisories/33675
http://ktorrent.org/?q=node/23
https://nvd.nist.gov/vuln/detail/CVE-2008-5905
http://www.securityfocus.com/bid/31927
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178
http://www.vupen.com/english/advisories/2008/2911
http://www.ubuntu.com/usn/USN-711-1
http://secunia.com/advisories/32447
https://exchange.xforce.ibmcloud.com/vulnerabilities/46117
http://secunia.com/advisories/34003
https://bugs.gentoo.org/show_bug.cgi?id=244741
https://people.canonical.com/~ubuntu-security/cve/CVE-2008-5905
http://security.gentoo.org/glsa/glsa-200902-05.xml
http://openwall.com/lists/oss-security/2009/01/08/1
https://www.mend.io/vulnerability-database/CVE-2008-5905

Severity Score

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us