CVE-2009-1759

Published: May 22, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path.

Affected (5)

Products: Rahul: Dtorrent, Ctorrent

2 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Rahul Dtorrent	Version 3.2.0
Rahul Dtorrent	Version 3.3.0
Rahul Dtorrent	Version 3.3.1
Rahul Dtorrent	Version 3.3.2

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Rahul Ctorrent	Version 1.3.4

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (28)

http://dtorrent.svn.sourceforge.net/viewvc/dtorrent/dtorrent/trunk/btfiles.cpp?r1=296&r2=301&view=patch

Source: cve@mitre.org

Patch

http://secunia.com/advisories/34752

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35499

Source: cve@mitre.org

http://secunia.com/advisories/36471

Source: cve@mitre.org

http://sourceforge.net/tracker/?func=detail&aid=2782875&group_id=202532&atid=981959

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1817

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/05/20/3

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/34584

Source: cve@mitre.org

ExploitPatch

http://www.vupen.com/english/advisories/2009/1092

Source: cve@mitre.org

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=501813

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/49959

Source: cve@mitre.org

https://www.exploit-db.com/exploits/8470

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01010.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01102.html

Source: cve@mitre.org

http://dtorrent.svn.sourceforge.net/viewvc/dtorrent/dtorrent/trunk/btfiles.cpp?r1=296&r2=301&view=patch

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/34752

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35499

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36471

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/tracker/?func=detail&aid=2782875&group_id=202532&atid=981959

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1817

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2009/05/20/3

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/34584

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.vupen.com/english/advisories/2009/1092

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=501813

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/49959

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/8470

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01010.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01102.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.