CVE-2006-6331: Medium severity torrentflux torrentflux vulnerability
Published Dec 6, 2006
·Updated
metaInfo.php in TorrentFlux 2.2, when $cfg["enablefilepriority"] is false, allows remote attackers to execute arbitrary commands via shell metacharacters (backticks) in the torrent parameter to (1) details.php and (2) startpop.php.
Affected Software
1 affected component
TorrentFlux TorrentFlux=2.2
Remediation
Event History
Dec 6, 2006
CVE Published
09:28 PM
Data Sourced
via NVD·09:28 PM
DescriptionSeverityAffected Software
Dec 7, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-6331?
CVE-2006-6331 is classified as a critical vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2006-6331?
To fix CVE-2006-6331, you should update TorrentFlux to a version that addresses this vulnerability.
3
What types of attacks are possible with CVE-2006-6331?
CVE-2006-6331 allows remote attackers to execute arbitrary commands on the server via crafted torrent parameters.
4
Which version of TorrentFlux is affected by CVE-2006-6331?
CVE-2006-6331 specifically affects TorrentFlux version 2.2.
5
What configuration setting exacerbates CVE-2006-6331?
The vulnerability is exacerbated when the configuration setting $cfg["enable_file_priority"] is set to false.