Path Traversal in Freedownloadmanager Free Download Manager

CVE-2010-0999

Directory traversal vulnerability in Free Download Manager (FDM) before 3.0.852 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.017 (75.3th percentile) — read the EPSS interpretation.

Affected products

Freedownloadmanager Free_download_manager — versions 3.0.848, 2, 3.0.850
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)
PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (signature, x_refsource_OVAL, vdb-entry)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (mailing-list, x_refsource_BUGTRAQ)
PSIRT-CNA@flexerasoftware.com (x_refsource_OSVDB, vdb-entry)