CVE-2010-0999

Published: May 17, 2010Modified: Apr 29, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:C/A:N

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

Directory traversal vulnerability in Free Download Manager (FDM) before 3.0.852 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

Affected (9)

Products: Freedownloadmanager: Free Download Manager

Freedownloadmanager

1 product

Free Download Manager

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Freedownloadmanager Free Download Manager	Up to 3.0.851
Freedownloadmanager Free Download Manager	Version 2.1
Freedownloadmanager Free Download Manager	Version 2.5.700
Freedownloadmanager Free Download Manager	Version 2.5.704
Freedownloadmanager Free Download Manager	Version 2.5.724
Freedownloadmanager Free Download Manager	Version 2
Freedownloadmanager Free Download Manager	Version 3.0.843
Freedownloadmanager Free Download Manager	Version 3.0.848
Freedownloadmanager Free Download Manager	Version 3.0.850

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (12)

http://osvdb.org/64670

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/secunia_research/2010-67/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.securityfocus.com/archive/1/511284/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/40152

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/58627

Source: PSIRT-CNA@flexerasoftware.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7284

Source: PSIRT-CNA@flexerasoftware.com

http://osvdb.org/64670

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/secunia_research/2010-67/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/511284/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/40152

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/58627

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7284

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.