cTorrent and dTorrent Torrent File Buffer Overflow Vulnerability

Bugtraq ID:	34584
Class:	Boundary Condition Error
CVE:	CVE-2009-1759
Remote:	Yes
Local:	No
Published:	Apr 17 2009 12:00AM
Updated:	Apr 13 2015 09:20PM
Credit:	Michael Brooks
Vulnerable:	Gentoo Linux dTorrent dTorrent 3.3.2 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 cTorrent cTorrent 1.3.4
Not Vulnerable:

cTorrent and dTorrent Torrent File Buffer Overflow Vulnerability

cTorrent and dTorrent are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

Successful exploits allow remote attackers to execute arbitrary machine code in the context of a vulnerable application. Failed exploit attempts will likely result in denial-of-service conditions.

cTorrent 1.3.4 and dTorrent 3.3.2 are vulnerable; other versions may also be affected.

cTorrent and dTorrent Torrent File Buffer Overflow Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to view a maliciously crafted '.torrent' file.

The following exploit code is available:

• /data/vulnerabilities/exploits/34584.py

cTorrent and dTorrent Torrent File Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 hppa

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_hppa.deb

Debian Linux 5.0 ia-64

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_ia64.deb

Debian Linux 5.0 arm

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_arm.deb

Debian Linux 5.0 armel

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_armel.deb

Debian Linux 5.0 amd64

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_amd64.deb

Debian Linux 5.0 alpha

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_alpha.deb

Debian Linux 5.0 ia-32

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_i386.deb

Debian Linux 5.0 mips

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_mips.deb

Debian Linux 5.0 s/390

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_s390.deb

Debian Linux 5.0 mipsel

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_mipsel.deb

Debian Linux 5.0 powerpc

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_powerpc.deb

Debian Linux 5.0 sparc

• Debian ctorrent_1.3.4-dnh3.2-1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/ctorrent/ctorrent_1.3.4 -dnh3.2-1+lenny1_sparc.deb

dTorrent dTorrent 3.3.2

• dTorrent dtorrent/trunk/btfiles.cpp
  http://dtorrent.svn.sourceforge.net/viewvc/dtorrent/dtorrent/trunk/btf iles.cpp?r1=296&r2=301&view=patch

cTorrent and dTorrent Torrent File Buffer Overflow Vulnerability

References:

• cTorrent Homepage (cTorrent )
  
• dTorrent Homepage (dTorrent)