Description
Directory traversal vulnerability in Free Download Manager (FDM) before 3.0.852 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
References
- fdm-name-directory-traversal(58627) vdb-entry
- http://secunia.com/secunia_research/2010-67/
- oval:org.mitre.oval:def:7284 vdb-entry signature
- 40152 vdb-entry
- 20100513 Secunia Research: Free Download Manager metalink "name" Directory Traversal mailing-list
- 64670 vdb-entry