Secunia Research has discovered a vulnerability in aria2, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to the application not properly sanitising the “name” attribute of the “file” element of metalink files before using it to download files. If a user is tricked into downloading from a specially crafted metalink file, this can be exploited to download files to directories outside of the intended download directory via directory traversal attacks. aria2 version 1.9.1 build2 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/89527/secunia-aria2ml.txt
Source: https://packetstormsecurity.com/files/89527/aria2-metalink-name-Directory-Traversal-Vulnerability.html