CVE-2008-0071 The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request....
MediumCVSS 4.3
EPSS 7.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bittorrent | <= 6.0.2 | No fix listed |
| bittorrent | = 3.9.1 | No fix listed |
| bittorrent | = 4.0.0 | No fix listed |
| bittorrent | = 4.0.1 | No fix listed |
| bittorrent | = 4.0.2 | No fix listed |
| bittorrent | = 4.0.3 | No fix listed |
| bittorrent | = 4.0.4 | No fix listed |
| bittorrent | = 4.1.0 | No fix listed |
| bittorrent | = 4.1.1 | No fix listed |
| bittorrent | = 4.1.2 | No fix listed |
| bittorrent | = 4.1.3 | No fix listed |
| bittorrent | = 4.1.4 | No fix listed |
| bittorrent | = 4.1.5 | No fix listed |
| bittorrent | = 4.1.6 | No fix listed |
| bittorrent | = 4.1.7 | No fix listed |
| bittorrent | = 4.1.8 | No fix listed |
| bittorrent | = 4.2.0 | No fix listed |
| bittorrent | = 4.2.1 | No fix listed |
| bittorrent | = 4.2.2 | No fix listed |
| bittorrent | = 4.3.0 | No fix listed |
| bittorrent | = 4.3.1 | No fix listed |
| bittorrent | = 4.3.2 | No fix listed |
| bittorrent | = 4.3.3 | No fix listed |
| bittorrent | = 4.3.4 | No fix listed |
| bittorrent | = 4.3.5 | No fix listed |
Show 62 more
| Product | Affected versions | Fixed in |
|---|---|---|
| bittorrent | = 4.3.6 | No fix listed |
| bittorrent | = 4.4.0 | No fix listed |
| bittorrent | = 4.4.1 | No fix listed |
| bittorrent | = 4.9.2 | No fix listed |
| bittorrent | = 4.9.3 | No fix listed |
| bittorrent | = 4.9.4 | No fix listed |
| bittorrent | = 4.9.5 | No fix listed |
| bittorrent | = 4.9.6 | No fix listed |
| bittorrent | = 4.9.7 | No fix listed |
| bittorrent | = 4.9.8 | No fix listed |
| bittorrent | = 4.9.9 | No fix listed |
| bittorrent | = 4.20.0 | No fix listed |
| bittorrent | = 4.20.1 | No fix listed |
| bittorrent | = 4.20.2 | No fix listed |
| bittorrent | = 4.20.4 | No fix listed |
| bittorrent | = 4.20.6 | No fix listed |
| bittorrent | = 4.20.7 | No fix listed |
| bittorrent | = 4.20.8 | No fix listed |
| bittorrent | = 4.20.9 | No fix listed |
| bittorrent | = 4.22.0 | No fix listed |
| bittorrent | = 4.22.1 | No fix listed |
| bittorrent | = 4.22.4 | No fix listed |
| bittorrent | = 4.24.0 | No fix listed |
| bittorrent | = 4.24.2 | No fix listed |
| bittorrent | = 4.26.0 | No fix listed |
| bittorrent | = 4.27.1 | No fix listed |
| bittorrent | = 4.27.2 | No fix listed |
| bittorrent | = 5.0.0 | No fix listed |
| bittorrent | = 5.0.1 | No fix listed |
| bittorrent | = 5.0.2 | No fix listed |
| bittorrent | = 5.0.3 | No fix listed |
| bittorrent | = 5.0.4 | No fix listed |
| bittorrent | = 5.0.5 | No fix listed |
| bittorrent | = 5.0.6 | No fix listed |
| bittorrent | = 5.0.7 | No fix listed |
| bittorrent | = 5.0.8 | No fix listed |
| bittorrent | = 5.0.9 | No fix listed |
| bittorrent | = 5.2.0 | No fix listed |
| bittorrent | = 6.0 | No fix listed |
| bittorrent | = 6.0.1 | No fix listed |
| utorrent | <= 1.7.7 | No fix listed |
| utorrent | = 1.1.1 | No fix listed |
| utorrent | = 1.1.3 | No fix listed |
| utorrent | = 1.1.4 | No fix listed |
| utorrent | = 1.1.5 | No fix listed |
| utorrent | = 1.1.6 | No fix listed |
| utorrent | = 1.1.7 | No fix listed |
| utorrent | = 1.2 | No fix listed |
| utorrent | = 1.2.1 | No fix listed |
| utorrent | = 1.2.2 | No fix listed |
| utorrent | = 1.3 | No fix listed |
| utorrent | = 1.4 | No fix listed |
| utorrent | = 1.4.2 | No fix listed |
| utorrent | = 1.5 | No fix listed |
| utorrent | = 1.6 | No fix listed |
| utorrent | = 1.7 | No fix listed |
| utorrent | = 1.7.1 | No fix listed |
| utorrent | = 1.7.2 | No fix listed |
| utorrent | = 1.7.3 | No fix listed |
| utorrent | = 1.7.4 | No fix listed |
| utorrent | = 1.7.5 | No fix listed |
| utorrent | = 1.7.6 | No fix listed |
References
- 28703 third-party-advisory vendor-advisory
- 30605 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 3943 third-party-advisory
- 1020266 vdb-entry
- 20080611 Secunia Research: uTorrent / BitTorrent Web UI HTTP "Range" Header DoS mailing-list
- 29661 patch vdb-entry
- 1020265 vdb-entry
- ADV-2008-1808 vdb-entry
- ADV-2008-1809 vdb-entry
- 5918 exploit