CVE catalog

CVE-2013-4510

tryton-client: CVE-2013-4510

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
2.17% · Oct 25, 2026

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiantryton-clientsid7.0.43-1fixed
Debiantryton-clientforky7.0.43-1fixed
Debiantryton-clienttrixie7.0.24-1fixed
Debiantryton-clientbookworm6.0.26-1+deb12u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiantryton-clientsourcesid2.8.4-1not yet assignedNot reportedNot reported
Debiantryton-clientsourceforky2.8.4-1not yet assignedNot reportedNot reported
Debiantryton-clientsourcetrixie2.8.4-1not yet assignedNot reportedNot reported
Debiantryton-clientsourcebookworm2.8.4-1not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Details (2)
    • 6.0.26-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.8.4-1

      dsa · tryton-client · debian · bookworm; dsa · tryton-client · debian · 12

    • 6.0.26-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.8.4-1

      dsa · tryton-client · debian · bookworm; dsa · tryton-client · debian · 12

  • Source package: [tryton-client]

    Details (2)
    • 6.0.26-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.8.4-1

      dsa · tryton-client · debian · bookworm; dsa · tryton-client · debian · 12

    • 6.0.26-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.8.4-1

      dsa · tryton-client · debian · bookworm; dsa · tryton-client · debian · 12

[Debian 13 (Trixie)]

  • Details (2)
    • 7.0.24-1 · all · trixie

      Fixed · Fixed: 2.8.4-1

      dsa · tryton-client · debian · 13

    • 7.0.24-1 · all · trixie

      Fixed · Fixed: 2.8.4-1

      dsa · tryton-client · debian · 13

  • Source package: [tryton-client]

    Details (2)
    • 7.0.24-1 · all · trixie

      Fixed · Fixed: 2.8.4-1

      dsa · tryton-client · debian · 13

    • 7.0.24-1 · all · trixie

      Fixed · Fixed: 2.8.4-1

      dsa · tryton-client · debian · 13

Observed:

References