Initial testing shows that Hardy and Intrepid aren't affected.
Transmission strips out the '/' in '../' for a file, and therefore the
file that is created using the above is $HOME/Desktop/..EVIL.
** Changed in: transmission (Ubuntu Hardy)
Status: New => Incomplete
** Changed in: transmission (Ubuntu Intrepid)
Status: New => Incomplete
--
Local file overwriting due to directory traversal
https://bugs.launchpad.net/bugs/500625
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
