CVE编号
CVE-2012-4037利用情况
暂无补丁情况
官方补丁披露时间
2012-08-16漏洞描述
Transmission是一款*nix下的BT下载软件。Transmission处理特制的.torrent文件时存在跨站脚本缺陷(不正确处理"comment"和"created by"字段)，攻击者可以利用漏洞构建恶意文件，诱使用户解析，可获得敏感信息。解决建议
Transmission 2.61及之后版本已经修复此漏洞，建议用户下载使用：http://www.transmissionbt.com/
参考链接 |
|
|---|---|
| http://archives.neohapsis.com/archives/fulldisclosure/2012-07/0349.html | |
| http://secunia.com/advisories/50027 | |
| http://secunia.com/advisories/50769 | |
| http://www.madirish.net/541 | |
| http://www.securityfocus.com/bid/54705 | |
| http://www.ubuntu.com/usn/USN-1584-1 | |
| https://trac.transmissionbt.com/ticket/4979 | |
| https://trac.transmissionbt.com/wiki/Changes#version-2.61 |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | * |
Up to (including) 2.60 |
|||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.1 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.2 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.3 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.4 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.5 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.6 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.6.1 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.70 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.71 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.72 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.80 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.81 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.82 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.90 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.91 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.92 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.93 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.94 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.95 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 0.96 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.00 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.01 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.02 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.03 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.04 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.05 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.06 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.10 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.11 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.2 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.20 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.21 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.22 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.30 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.31 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.32 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.33 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.34 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.40 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.41 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.42 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.50 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.51 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.52 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.53 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.54 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.60 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.61 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.70 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.71 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.72 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.73 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.74 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.75 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.76 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.77 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.80 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.81 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.82 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.83 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.90 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.91 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.92 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 1.93 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.00 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.01 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.02 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.03 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.04 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.10 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.11 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.12 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.13 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.20 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.21 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.22 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.30 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.31 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.32 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.33 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.40 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.41 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.42 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.50 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.51 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | transmissionbt | transmission | 2.52 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | ubuntu_12.04_lts | transmission | * |
Up to (excluding) 2.51-0ubuntu1.1 |
|||||
- 攻击路径 本地
- 攻击复杂度 困难
- 权限要求 普通权限
- 影响范围 有限影响
- EXP成熟度 未验证
- 补丁情况 官方补丁
- 数据保密性 无影响
- 数据完整性 无影响
- 服务器危害 无影响
- 全网数量 -
还没有评论，来说两句吧...