CVE-2008-0071

Public PoC / Exploit (2)

Exploit-DBμTorrent (uTorrent) / BitTorrent WebIU HTTP 1.7.7/6.0.1 - Range header Denial of Service TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.

Weaknesses (CWE)

CWE-20

Affected Products (87)

bittorrent · bittorrentvulnerable

...and 37 more

References (20)

http://secunia.com/advisories/28703

Vendor Advisory

http://secunia.com/advisories/30605

Vendor Advisory

http://secunia.com/secunia_research/2008-7/advisory/

Vendor Advisory

http://securityreason.com/securityalert/3943

http://securitytracker.com/id?1020266

http://www.securityfocus.com/archive/1/493269/100/0/threaded

http://www.securityfocus.com/bid/29661

Patch

http://www.securitytracker.com/id?1020265

http://www.vupen.com/english/advisories/2008/1808

http://www.vupen.com/english/advisories/2008/1809

https://www.exploit-db.com/exploits/5918

http://secunia.com/advisories/28703

Vendor Advisory

http://secunia.com/advisories/30605

Vendor Advisory

http://secunia.com/secunia_research/2008-7/advisory/

Vendor Advisory

http://securityreason.com/securityalert/3943

http://securitytracker.com/id?1020266

http://www.securityfocus.com/archive/1/493269/100/0/threaded

http://www.securityfocus.com/bid/29661

Patch

http://www.securitytracker.com/id?1020265

http://www.vupen.com/english/advisories/2008/1808