KTorrent PHP Code Injection And Security Bypass Vulnerabilities

Bugtraq ID:	31927
Class:	Input Validation Error
CVE:	CVE-2008-5905 CVE-2008-5906
Remote:	Yes
Local:	No
Published:	Oct 20 2008 12:00AM
Updated:	Apr 13 2015 10:00PM
Credit:	KTorrent
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 SuSE openSUSE 10.3 S.u.S.E. openSUSE 11.0 Pardus Linux 2008 0 KTorrent KTorrent 3.1.3 Gentoo Linux
Not Vulnerable:	KTorrent KTorrent 3.1.4

KTorrent PHP Code Injection And Security Bypass Vulnerabilities

KTorrent is prone to a remote PHP code-injection vulnerability and a security-bypass vulnerability. The issues affect the the application's web interface.

An attacker can exploit these issues to perform certain actions without authorization and execute arbitrary malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks may also be possible.

The issue affects KTorrent 3.1.3; other versions may also be vulnerable.

KTorrent PHP Code Injection And Security Bypass Vulnerabilities

Attackers can exploit this issue via a browser.

KTorrent PHP Code Injection And Security Bypass Vulnerabilities

Solution:
The vendor released updates to address these issues. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 i386

• Ubuntu ktorrent_2.2.1-0ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/ktorrent/ktorrent_2.2.1- 0ubuntu3.1_i386.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu ktorrent-dbg_3.1.2+dfsg.1-0ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/k/ktorrent/ktorrent-dbg_3.1.2+dfsg.1 -0ubuntu2.1_lpia.deb


• Ubuntu ktorrent_3.1.2+dfsg.1-0ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/k/ktorrent/ktorrent_3.1.2+dfsg.1-0ub untu2.1_lpia.deb

Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu ktorrent_2.2.1-0ubuntu3.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/ktorrent/ktorrent_2.2.1- 0ubuntu3.1_powerpc.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu ktorrent-dbg_3.1.2+dfsg.1-0ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/k/ktorrent/ktorrent-dbg_3.1.2+dfsg.1 -0ubuntu2.1_sparc.deb


• Ubuntu ktorrent_3.1.2+dfsg.1-0ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/k/ktorrent/ktorrent_3.1.2+dfsg.1-0ub untu2.1_sparc.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu ktorrent_2.2.5-0ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/ktorrent/ktorrent_2.2.5-0ubuntu1.1 _powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu ktorrent-dbg_3.1.2+dfsg.1-0ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/ktorrent/ktorrent-dbg_3.1.2+dfsg.1 -0ubuntu2.1_powerpc.deb


• Ubuntu ktorrent_3.1.2+dfsg.1-0ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/ktorrent/ktorrent_3.1.2+dfsg.1-0ub untu2.1_powerpc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu ktorrent-dbg_3.1.2+dfsg.1-0ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/ktorrent/ktorrent-dbg_3. 1.2+dfsg.1-0ubuntu2.1_i386.deb


• Ubuntu ktorrent_3.1.2+dfsg.1-0ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/ktorrent/ktorrent_3.1.2+ dfsg.1-0ubuntu2.1_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu ktorrent_2.2.5-0ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/k/ktorrent/ktorrent_2.2.5-0ubuntu1.1 _sparc.deb

Ubuntu Ubuntu Linux 7.10 amd64

• Ubuntu ktorrent_2.2.1-0ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/ktorrent/ktorrent_2.2.1- 0ubuntu3.1_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu ktorrent_2.2.5-0ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/ktorrent/ktorrent_2.2.5- 0ubuntu1.1_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu ktorrent_2.2.5-0ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/ktorrent/ktorrent_2.2.5- 0ubuntu1.1_amd64.deb

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu ktorrent_2.2.1-0ubuntu3.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/ktorrent/ktorrent_2.2.1- 0ubuntu3.1_sparc.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu ktorrent-dbg_3.1.2+dfsg.1-0ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/ktorrent/ktorrent-dbg_3. 1.2+dfsg.1-0ubuntu2.1_amd64.deb


• Ubuntu ktorrent_3.1.2+dfsg.1-0ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/ktorrent/ktorrent_3.1.2+ dfsg.1-0ubuntu2.1_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu ktorrent_2.2.5-0ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/k/ktorrent/ktorrent_2.2.5-0ubuntu1.1 _lpia.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu ktorrent_2.2.1-0ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/k/ktorrent/ktorrent_2.2.1-0ubuntu3.1 _lpia.deb

KTorrent PHP Code Injection And Security Bypass Vulnerabilities

References:

• KTorrent 3.1.4 released (KTorrent)
  
• KTorrent Homepage (KTorrent)