CVE-2006-6598

TorrentFlux 2.2 - 'downloaddetails.php' Local File Disclosure

Severity Score

6.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the path parameter, a different vector than CVE-2006-6328.

Vulnerabildiad de salto de directorio en viewnfo.php en (1) TorrentFlux anterior a 2.2 y (2) torrentflux-b4rt anterior 2.1-b4rt-972 permite a usuarios validados leer archivos de su elección a través de la secuencia .. (punto punto) en el parámetro path, un vector diferente que CVE-2006-6328.

*Credits: N/A

CVSS Scores

NISTv2 6.5

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-12-15 CVE Reserved
2006-12-15 CVE Published
2024-08-07 CVE Updated
2024-08-07 First Exploit
2024-08-20 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (4)

URL	Tag	Source
http://www.securityfocus.com/bid/21613	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/2902	2024-08-07
http://tf-b4rt.berlios.de/changelog-torrentflux_2.1-b4rt.txt	2024-08-07

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/23402	2017-10-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Torrentflux Search vendor "Torrentflux"		Torrentflux Search vendor "Torrentflux" for product "Torrentflux"				<= 2.2 Search vendor "Torrentflux" for product "Torrentflux" and version " <= 2.2"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				<= 2.1_b4rt971 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version " <= 2.1_b4rt971"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt3 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt3"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt4 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt4"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt5 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt5"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt6 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt6"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt7 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt7"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt8 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt8"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt9 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt9"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt61 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt61"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt81 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt81"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt82 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt82"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt83 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt83"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt84 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt84"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt85 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt85"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt91 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt91"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt92 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt92"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt93 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt93"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt94 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt94"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt95 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt95"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt96 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt96"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt97 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt97"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt801 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt801"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt802 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt802"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt951 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt951"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt952 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt952"		-		Affected
Torrentflux Search vendor "Torrentflux"		Torrentflux-b4rt Search vendor "Torrentflux" for product "Torrentflux-b4rt"				2.1_b4rt953 Search vendor "Torrentflux" for product "Torrentflux-b4rt" and version "2.1_b4rt953"		-		Affected