Intrepid confirmed when using a directory. Eg, if the torrent has:
../bad
../bad/foo
Then do on the affected client:
$ mkdir bad
$ echo "my data" > ./bad/foo
Then opening $HOME/Desktop/bad.torrent will overwrite 'foo'. This
doesn't seem to be a problem for Hardy, but I'm still investigating.
** Changed in: transmission (Ubuntu Intrepid)
Status: Incomplete => In Progress
--
Local file overwriting due to directory traversal
https://bugs.launchpad.net/bugs/500625
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
