Transmission Arbitrary File Overwrite Vulnerability

Bugtraq ID:	37659
Class:	Input Validation Error
CVE:	CVE-2010-0012
Remote:	Yes
Local:	No
Published:	Jan 04 2010 12:00AM
Updated:	Apr 13 2015 09:59PM
Credit:	Dan Rosenberg
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Transmission Project Transmission 1.76 Transmission Project Transmission 1.50 Transmission Project Transmission 1.41 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:	Transmission Project Transmission 1.77

Transmission Arbitrary File Overwrite Vulnerability

Transmission is prone to a vulnerability that may allow remote attackers to overwrite arbitrary local files.

Exploits may allow attackers to compromise the system in the context of the user running the vulnerable application; other attacks are also possible.

This issue affects versions prior to Transmission 1.77.

Transmission Arbitrary File Overwrite Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to use the affected application to open a malicious file.

The researcher who discovered this issue has developed a proof-of-concept exploit. Please see the references for more information.

Transmission Arbitrary File Overwrite Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu transmission-cli_1.75-0ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.75-0ubuntu2.2_sparc.deb


• Ubuntu transmission-common_1.75-0ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.75-0ubuntu2.2_all.deb


• Ubuntu transmission-daemon_1.75-0ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-daem on_1.75-0ubuntu2.2_sparc.deb


• Ubuntu transmission-gtk_1.75-0ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.75 -0ubuntu2.2_sparc.deb


• Ubuntu transmission-qt_1.75-0ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-qt_1 .75-0ubuntu2.2_sparc.deb


• Ubuntu transmission_1.75-0ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.75-0ubuntu2.2_all.deb

Debian Linux 5.0 ia-64

• Debian transmission-cli_1.22-1+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-cli_1.22-1+lenny2_ia64.deb


• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission-gtk_1.22-1+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-gtk_1.22-1+lenny2_ia64.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva transmission-1.51-1.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu transmission-cli_1.06-0ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.06-0ubuntu6.1_powerpc.deb


• Ubuntu transmission-common_1.06-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.06-0ubuntu6.1_all.deb


• Ubuntu transmission-gtk_1.06-0ubuntu6.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.06 -0ubuntu6.1_powerpc.deb


• Ubuntu transmission_1.06-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.06-0ubuntu6.1_all.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu transmission-cli_1.34-0ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.34-0ubuntu2.3_powerpc.deb


• Ubuntu transmission-common_1.34-0ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.34-0ubuntu2.3_all.deb


• Ubuntu transmission-gtk_1.34-0ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.34 -0ubuntu2.3_powerpc.deb


• Ubuntu transmission_1.34-0ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.34-0ubuntu2.3_all.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu transmission-cli_1.06-0ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.06-0ubuntu6.1_sparc.deb


• Ubuntu transmission-common_1.06-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.06-0ubuntu6.1_all.deb


• Ubuntu transmission-gtk_1.06-0ubuntu6.1_sparc.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.06 -0ubuntu6.1_sparc.deb


• Ubuntu transmission_1.06-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.06-0ubuntu6.1_all.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu transmission-cli_1.34-0ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-cli_1.34-0ubuntu2.3_i386.deb


• Ubuntu transmission-common_1.34-0ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.34-0ubuntu2.3_all.deb


• Ubuntu transmission-gtk_1.34-0ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-gtk_1.34-0ubuntu2.3_i386.deb


• Ubuntu transmission_1.34-0ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.34-0ubuntu2.3_all.deb

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu transmission-cli_1.75-0ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.75-0ubuntu2.2_powerpc.deb


• Ubuntu transmission-common_1.75-0ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.75-0ubuntu2.2_all.deb


• Ubuntu transmission-daemon_1.75-0ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-daem on_1.75-0ubuntu2.2_powerpc.deb


• Ubuntu transmission-gtk_1.75-0ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.75 -0ubuntu2.2_powerpc.deb


• Ubuntu transmission-qt_1.75-0ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-qt_1 .75-0ubuntu2.2_powerpc.deb


• Ubuntu transmission_1.75-0ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.75-0ubuntu2.2_all.deb

Debian Linux 5.0 alpha

• Debian transmission-cli_1.22-1+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-cli_1.22-1+lenny2_alpha.deb


• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission-gtk_1.22-1+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-gtk_1.22-1+lenny2_alpha.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Debian Linux 5.0 ia-32

• Debian transmission-cli_1.22-1+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-cli_1.22-1+lenny2_i386.deb


• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission-gtk_1.22-1+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-gtk_1.22-1+lenny2_i386.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu transmission-cli_1.06-0ubuntu6.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-cli_1.06-0ubuntu6.1_amd64.deb


• Ubuntu transmission-common_1.06-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.06-0ubuntu6.1_all.deb


• Ubuntu transmission-gtk_1.06-0ubuntu6.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-gtk_1.06-0ubuntu6.1_amd64.deb


• Ubuntu transmission_1.06-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.06-0ubuntu6.1_all.deb

Debian Linux 5.0 s/390

• Debian transmission-cli_1.22-1+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-cli_1.22-1+lenny2_s390.deb


• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission-gtk_1.22-1+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-gtk_1.22-1+lenny2_s390.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu transmission-cli_1.75-0ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.75-0ubuntu2.2_lpia.deb


• Ubuntu transmission-common_1.75-0ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.75-0ubuntu2.2_all.deb


• Ubuntu transmission-daemon_1.75-0ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-daem on_1.75-0ubuntu2.2_lpia.deb


• Ubuntu transmission-gtk_1.75-0ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.75 -0ubuntu2.2_lpia.deb


• Ubuntu transmission-qt_1.75-0ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-qt_1 .75-0ubuntu2.2_lpia.deb


• Ubuntu transmission_1.75-0ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.75-0ubuntu2.2_all.deb

Debian Linux 5.0 mipsel

• Debian transmission-cli_1.22-1+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-cli_1.22-1+lenny2_mipsel.deb


• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission-gtk_1.22-1+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-gtk_1.22-1+lenny2_mipsel.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu transmission-cli_1.51-0ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.51-0ubuntu3.1_sparc.deb


• Ubuntu transmission-common_1.51-0ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.51-0ubuntu3.1_all.deb


• Ubuntu transmission-daemon_1.51-0ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-daem on_1.51-0ubuntu3.1_sparc.deb


• Ubuntu transmission-gtk_1.51-0ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.51 -0ubuntu3.1_sparc.deb


• Ubuntu transmission_1.51-0ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.51-0ubuntu3.1_all.deb

Mandriva Linux Mandrake 2010.0

• Mandriva transmission-cli-1.75-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva transmission-common-1.75-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva transmission-daemon-1.75-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva transmission-gtk-1.75-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva transmission-qt4-1.75-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu transmission-cli_1.06-0ubuntu6.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.06-0ubuntu6.1_lpia.deb


• Ubuntu transmission-common_1.06-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.06-0ubuntu6.1_all.deb


• Ubuntu transmission-gtk_1.06-0ubuntu6.1_lpia.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.06 -0ubuntu6.1_lpia.deb


• Ubuntu transmission_1.06-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.06-0ubuntu6.1_all.deb

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu transmission-cli_1.51-0ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.51-0ubuntu3.1_powerpc.deb


• Ubuntu transmission-common_1.51-0ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.51-0ubuntu3.1_all.deb


• Ubuntu transmission-daemon_1.51-0ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-daem on_1.51-0ubuntu3.1_powerpc.deb


• Ubuntu transmission-gtk_1.51-0ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.51 -0ubuntu3.1_powerpc.deb


• Ubuntu transmission_1.51-0ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.51-0ubuntu3.1_all.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu transmission-cli_1.34-0ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.34-0ubuntu2.3_lpia.deb


• Ubuntu transmission-common_1.34-0ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.34-0ubuntu2.3_all.deb


• Ubuntu transmission-gtk_1.34-0ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.34 -0ubuntu2.3_lpia.deb


• Ubuntu transmission_1.34-0ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.34-0ubuntu2.3_all.deb

Mandriva Linux Mandrake 2010.0 x86_64

• Mandriva transmission-cli-1.75-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva transmission-common-1.75-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva transmission-daemon-1.75-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva transmission-gtk-1.75-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva transmission-qt4-1.75-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 hppa

• Debian transmission-cli_1.22-1+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-cli_1.22-1+lenny2_hppa.deb


• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission-gtk_1.22-1+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-gtk_1.22-1+lenny2_hppa.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu transmission-cli_1.51-0ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-cli_1.51-0ubuntu3.1_i386.deb


• Ubuntu transmission-common_1.51-0ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.51-0ubuntu3.1_all.deb


• Ubuntu transmission-daemon_1.51-0ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-daemon_1.51-0ubuntu3.1_i386.deb


• Ubuntu transmission-gtk_1.51-0ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-gtk_1.51-0ubuntu3.1_i386.deb


• Ubuntu transmission_1.51-0ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.51-0ubuntu3.1_all.deb

Debian Linux 5.0 m68k

• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu transmission-cli_1.51-0ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.51-0ubuntu3.1_lpia.deb


• Ubuntu transmission-common_1.51-0ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.51-0ubuntu3.1_all.deb


• Ubuntu transmission-daemon_1.51-0ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-daem on_1.51-0ubuntu3.1_lpia.deb


• Ubuntu transmission-gtk_1.51-0ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.51 -0ubuntu3.1_lpia.deb


• Ubuntu transmission_1.51-0ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.51-0ubuntu3.1_all.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu transmission-cli_1.34-0ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/universe/t/transmission/transmission-cli_ 1.34-0ubuntu2.3_sparc.deb


• Ubuntu transmission-common_1.34-0ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.34-0ubuntu2.3_all.deb


• Ubuntu transmission-gtk_1.34-0ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/main/t/transmission/transmission-gtk_1.34 -0ubuntu2.3_sparc.deb


• Ubuntu transmission_1.34-0ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.34-0ubuntu2.3_all.deb

Debian Linux 5.0 arm

• Debian transmission-cli_1.22-1+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-cli_1.22-1+lenny2_arm.deb


• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission-gtk_1.22-1+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-gtk_1.22-1+lenny2_arm.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu transmission-cli_1.75-0ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-cli_1.75-0ubuntu2.2_i386.deb


• Ubuntu transmission-common_1.75-0ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.75-0ubuntu2.2_all.deb


• Ubuntu transmission-daemon_1.75-0ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-daemon_1.75-0ubuntu2.2_i386.deb


• Ubuntu transmission-gtk_1.75-0ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-gtk_1.75-0ubuntu2.2_i386.deb


• Ubuntu transmission-qt_1.75-0ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-qt_1.75-0ubuntu2.2_i386.deb


• Ubuntu transmission_1.75-0ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.75-0ubuntu2.2_all.deb

Debian Linux 5.0 armel

• Debian transmission-cli_1.22-1+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-cli_1.22-1+lenny2_armel.deb


• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission-gtk_1.22-1+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-gtk_1.22-1+lenny2_armel.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Debian Linux 5.0

• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu transmission-cli_1.75-0ubuntu2.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-cli_1.75-0ubuntu2.2_amd64.deb


• Ubuntu transmission-common_1.75-0ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.75-0ubuntu2.2_all.deb


• Ubuntu transmission-daemon_1.75-0ubuntu2.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-daemon_1.75-0ubuntu2.2_amd64.deb


• Ubuntu transmission-gtk_1.75-0ubuntu2.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-gtk_1.75-0ubuntu2.2_amd64.deb


• Ubuntu transmission-qt_1.75-0ubuntu2.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-qt_1.75-0ubuntu2.2_amd64.deb


• Ubuntu transmission_1.75-0ubuntu2.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.75-0ubuntu2.2_all.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu transmission-cli_1.06-0ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-cli_1.06-0ubuntu6.1_i386.deb


• Ubuntu transmission-common_1.06-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.06-0ubuntu6.1_all.deb


• Ubuntu transmission-gtk_1.06-0ubuntu6.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-gtk_1.06-0ubuntu6.1_i386.deb


• Ubuntu transmission_1.06-0ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.06-0ubuntu6.1_all.deb

Debian Linux 5.0 amd64

• Debian transmission-cli_1.22-1+lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-cli_1.22-1+lenny2_amd64.deb


• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission-gtk_1.22-1+lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-gtk_1.22-1+lenny2_amd64.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Debian Linux 5.0 mips

• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu transmission-cli_1.51-0ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-cli_1.51-0ubuntu3.1_amd64.deb


• Ubuntu transmission-common_1.51-0ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.51-0ubuntu3.1_all.deb


• Ubuntu transmission-daemon_1.51-0ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-daemon_1.51-0ubuntu3.1_amd64.deb


• Ubuntu transmission-gtk_1.51-0ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-gtk_1.51-0ubuntu3.1_amd64.deb


• Ubuntu transmission_1.51-0ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.51-0ubuntu3.1_all.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu transmission-cli_1.34-0ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion-cli_1.34-0ubuntu2.3_amd64.deb


• Ubuntu transmission-common_1.34-0ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-common_1.34-0ubuntu2.3_all.deb


• Ubuntu transmission-gtk_1.34-0ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/transmission/transmissio n-gtk_1.34-0ubuntu2.3_amd64.deb


• Ubuntu transmission_1.34-0ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/transmission/transmi ssion_1.34-0ubuntu2.3_all.deb

Mandriva Linux Mandrake 2009.1

• Mandriva transmission-1.51-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 powerpc

• Debian transmission-cli_1.22-1+lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-cli_1.22-1+lenny2_powerpc.deb


• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission-gtk_1.22-1+lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-gtk_1.22-1+lenny2_powerpc.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Debian Linux 5.0 sparc

• Debian transmission-cli_1.22-1+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-cli_1.22-1+lenny2_sparc.deb


• Debian transmission-common_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-common_1.22-1+lenny2_all.deb


• Debian transmission-gtk_1.22-1+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on-gtk_1.22-1+lenny2_sparc.deb


• Debian transmission_1.22-1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/t/transmission/transmissi on_1.22-1+lenny2_all.deb

Transmission Arbitrary File Overwrite Vulnerability

References:

• Local file overwriting due to directory traversal (Transmission)
  
• Transmission 1.77 (2010/01/04) (Transmission)
  
• Transmission Homepage (Transmission Project )