oss-security - CVE request: transmission <1.61 CSRF

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Thu, 21 May 2009 08:38:33 +0200
From: Marcus Meissner <meissner@...e.de>
To: OSS Security List <oss-security@...ts.openwall.com>
Subject: CVE request: transmission <1.61 CSRF

Hi,

spotted here:
http://www.transmissionbt.com/index.php

Transmission 1.61 Released!
A complete list of tickets closed can be seen here. 
Thanks to CacheFly for providing bandwidth. 

 All Platforms 
 Close potential CSRF security hole for Web Client users
 ...

Also fixed in previous series apparently:
Transmission 1.53 Released!
..
Close potential CSRF security hole for Web Client users
Fix locale error in the JSON parser
...

Ciao, Marcus

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.