Bitflu StorageFarabDb Module '.torrent' File Handling Security Bypass Vulnerability

Bugtraq ID:	27043
Class:	Access Validation Error
CVE:	CVE-2007-6636
Remote:	Yes
Local:	No
Published:	Dec 26 2007 12:00AM
Updated:	May 07 2015 05:34PM
Credit:	The vendor reported this issue.
Vulnerable:	Bitflu Bitflu 0.41 Bitflu Bitflu 0.40
Not Vulnerable:	Bitflu Bitflu 0.42

Bitflu StorageFarabDb Module '.torrent' File Handling Security Bypass Vulnerability

Bitflu is prone to a security-bypass vulnerability.

An attacker can exploit this issue to append to or create arbitrary files.

This issue affects versions prior to Bitflu 0.42.

Bitflu StorageFarabDb Module '.torrent' File Handling Security Bypass Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Bitflu StorageFarabDb Module '.torrent' File Handling Security Bypass Vulnerability

Solution:
The vendor has released Bitflu 0.42 to address this issue. Please see the references for more information.


Bitflu Bitflu 0.40

• Bitflu bitflu-0.42.tgz
  http://bitflu.workaround.ch/bitflu/bitflu-0.42.tgz

Bitflu Bitflu 0.41

• Bitflu bitflu-0.42.tgz
  http://bitflu.workaround.ch/bitflu/bitflu-0.42.tgz

Bitflu StorageFarabDb Module '.torrent' File Handling Security Bypass Vulnerability

References:

• Home Page (Bitflu)
  
• Version 0.42 (Released: 20071226) (Bitflu)