CVE-2009-1757

EUVD-2009-1752
Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 30%
Affected Products (NVD)
VendorProductVersion
transmissionbttransmission
1.50
transmissionbttransmission
1.51
transmissionbttransmission
1.52
transmissionbttransmission
1.60
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
transmission
bookworm
3.00-2.1+deb12u1
fixed
bullseye
3.00-1
fixed
etch
not-affected
lenny
not-affected
sid
4.0.6+dfsg-3
fixed
trixie
4.0.6+dfsg-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
transmission
dapper
dne
hardy
not-affected
intrepid
ignored
jaunty
Fixed 1.51-0ubuntu3.1
released
karmic
not-affected
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2009/05/21/1
http://www.transmissionbt.com/index.php
http://www.openwall.com/lists/oss-security/2009/05/21/1
http://www.transmissionbt.com/index.php