Lucene search

K
cve[email protected]CVE-2008-3429
HistoryJul 31, 2008 - 10:41 p.m.

CVE-2008-3429

2008-07-3122:41:00
CWE-119
web.nvd.nist.gov
24
cve-2008-3429
buffer overflow
httrack
winhttrack
denial of service
remote attackers
arbitrary code
long url

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.039 Low

EPSS

Percentile

92.1%

Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL.

Affected configurations

NVD
Node
httrackhttrackMatch0.23beta-2
OR
httrackhttrackMatch0.24beta-2
OR
httrackhttrackMatch0.25beta-2
OR
httrackhttrackMatch0.99beta-2
OR
httrackhttrackMatch0.996beta-2
OR
httrackhttrackMatch0.997beta-2
OR
httrackhttrackMatch0.998beta-2
OR
httrackhttrackMatch1.00
OR
httrackhttrackMatch1.01
OR
httrackhttrackMatch1.02
OR
httrackhttrackMatch1.03
OR
httrackhttrackMatch1.04
OR
httrackhttrackMatch1.10
OR
httrackhttrackMatch1.10b
OR
httrackhttrackMatch1.10c
OR
httrackhttrackMatch1.10d
OR
httrackhttrackMatch1.10e
OR
httrackhttrackMatch1.11
OR
httrackhttrackMatch1.15
OR
httrackhttrackMatch1.15b
OR
httrackhttrackMatch1.16
OR
httrackhttrackMatch1.16b
OR
httrackhttrackMatch1.20
OR
httrackhttrackMatch1.21
OR
httrackhttrackMatch1.22
OR
httrackhttrackMatch1.23
OR
httrackhttrackMatch1.24
OR
httrackhttrackMatch1.30
OR
httrackhttrackMatch2.00
OR
httrackhttrackMatch2.01
OR
httrackhttrackMatch2.2
OR
httrackhttrackMatch2.02
OR
httrackhttrackMatch3.00
OR
httrackhttrackMatch3.01
OR
httrackhttrackMatch3.02
OR
httrackhttrackMatch3.03
OR
httrackhttrackMatch3.04
OR
httrackhttrackMatch3.05
OR
httrackhttrackMatch3.06
OR
httrackhttrackMatch3.07
OR
httrackhttrackMatch3.08
OR
httrackhttrackMatch3.09
OR
httrackhttrackMatch3.10
OR
httrackhttrackMatch3.15
OR
httrackhttrackMatch3.162
OR
httrackhttrackMatch3.202
OR
httrackhttrackMatch3.218
OR
httrackhttrackMatch3.223
OR
httrackhttrackMatch3.23
OR
httrackhttrackMatch3.30
OR
httrackhttrackMatch3.31
OR
httrackhttrackMatch3.32
OR
httrackhttrackMatch3.33
OR
httrackhttrackMatch3.40
OR
httrackhttrackMatch3.402
OR
httrackhttrackMatch3.41
OR
httrackhttrackMatch3.412
OR
httrackhttrackMatch3.413
OR
httrackhttrackMatch3.42
OR
httrackhttrackMatch3.422
OR
httrackhttrackMatch3.423
OR
httrackwinhttrackRange3.422
OR
httrackwinhttrackMatch0.23beta-2
OR
httrackwinhttrackMatch0.24beta-2
OR
httrackwinhttrackMatch0.25beta-2
OR
httrackwinhttrackMatch0.99beta-2
OR
httrackwinhttrackMatch0.996beta-2
OR
httrackwinhttrackMatch0.997beta-2
OR
httrackwinhttrackMatch0.998beta-2
OR
httrackwinhttrackMatch1.00
OR
httrackwinhttrackMatch1.01
OR
httrackwinhttrackMatch1.02
OR
httrackwinhttrackMatch1.03
OR
httrackwinhttrackMatch1.04
OR
httrackwinhttrackMatch1.10
OR
httrackwinhttrackMatch1.10b
OR
httrackwinhttrackMatch1.10c
OR
httrackwinhttrackMatch1.10d
OR
httrackwinhttrackMatch1.10e
OR
httrackwinhttrackMatch1.11
OR
httrackwinhttrackMatch1.15
OR
httrackwinhttrackMatch1.16
OR
httrackwinhttrackMatch1.16b
OR
httrackwinhttrackMatch1.20
OR
httrackwinhttrackMatch1.21
OR
httrackwinhttrackMatch1.22
OR
httrackwinhttrackMatch1.23
OR
httrackwinhttrackMatch1.24
OR
httrackwinhttrackMatch1.30
OR
httrackwinhttrackMatch2.00
OR
httrackwinhttrackMatch2.01
OR
httrackwinhttrackMatch2.02
OR
httrackwinhttrackMatch2.2
OR
httrackwinhttrackMatch3.00
OR
httrackwinhttrackMatch3.01
OR
httrackwinhttrackMatch3.02
OR
httrackwinhttrackMatch3.03
OR
httrackwinhttrackMatch3.04
OR
httrackwinhttrackMatch3.05
OR
httrackwinhttrackMatch3.06
OR
httrackwinhttrackMatch3.07
OR
httrackwinhttrackMatch3.08
OR
httrackwinhttrackMatch3.09
OR
httrackwinhttrackMatch3.10
OR
httrackwinhttrackMatch3.15
OR
httrackwinhttrackMatch3.15b
OR
httrackwinhttrackMatch3.162
OR
httrackwinhttrackMatch3.202
OR
httrackwinhttrackMatch3.218
OR
httrackwinhttrackMatch3.223
OR
httrackwinhttrackMatch3.23
OR
httrackwinhttrackMatch3.30
OR
httrackwinhttrackMatch3.31
OR
httrackwinhttrackMatch3.32
OR
httrackwinhttrackMatch3.33
OR
httrackwinhttrackMatch3.40
OR
httrackwinhttrackMatch3.402
OR
httrackwinhttrackMatch3.41
OR
httrackwinhttrackMatch3.412
OR
httrackwinhttrackMatch3.413
OR
httrackwinhttrackMatch3.42

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.039 Low

EPSS

Percentile

92.1%