Description
Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via a metalink file containing directory traversal sequences in the name attribute of a file element.
References
- http://secunia.com/secunia_research/2010-73/
- 39527 third-party-advisory
- 20100519 Secunia Research: Orbit Downloader metalink "name" Directory Traversal mailing-list