I just fixed the exploit and verified it still works. He describes uTorrent as having “a lot of unnecessary remote attack surface.”

If that’s the case, it may be a simple matter for someone else to update the exploit.

Ormandy notes this does break his exploits, but he believes this token, too, is vulnerable. The fix involves adding a second token to the web interface. With that, the attacker can install anything on a computer.īitTorrent Inc has rolled out a patch to the beta version of the client and says the stable version will be patched within a week. However, the authentication token for this feature is ridiculously easy to compromise. It’s related to the program’s remote control feature, which allows the system’s owner to manage torrents from a web browser in another location. There you will find both the latest stable version (for Leopard) and the new beta, as well as links for older versions of Mac OS X.Based on the demo provided by Ormandy, uTorrent appears to have a number of DNS rebinding exploits in Windows. With that out of the way, Transmission fans can download the latest version of their favorite torrent client using the link below. At first glance, these UI tweaks seem to consist of some redesigned buttons. This was a popular feature request which the people behind the Transmission Project felt they simply had to fulfill.Īnother Lion-only change is the newly-added support for pasting a torrent file URL into the main window.įinally, the client adds mist notifications - “basic notification support for users without Growl” - and minor interface tweaks and bug fixes, according to the release notes. Specifically, 2.5 beta 1 brings “animated rows in the main window.” This is a Lion-only feature, the developers have confirmed.Īlso on the Mac, Transmission now quarantines all downloaded files to protect against malware, and the inspector no longer floats above other windows. Not only that, but the new version brings a specific enhancement for those who use Transmission on OS X 10.7 (and newer versions of Lion). OS X Lion users are, of course, supported.

If you want the new Transmission 2.5 when it comes out of beta, you’ll most certainly need Mac OS X version 10.6 aka Snow Leopard.Īccording to the developers of Transmission, the new build (2.50b1) “requires Mac OS X 10.6 Snow Leopard or newer.” Transmission fans using the popular torrent client on Mac OS X have a new version to download, which brings Lion-specific enhancements and OS requirements that don’t go below Mac OS X 10.6 (Snow Leopard).įor those who are reaping the benefits of Transmission on a Leopard machine (Mac OS X version 10.5), it’s safe to say that development has stopped here for them.

Latest stable transmission torrent