CVE-2011-1586

Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier…

published April 27, 2011

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attackers to create arbitrary files via a .. (dot dot) in the name attribute of a file element in a metalink file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1000.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03119 · 87.7th percentile
Published
2011-04-27T00:00Z
EPSS history
Timeline
  • 27 APR 00:00Z
    Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier…
    cvelistv5