Stack overflow

Stack-based buffer overflow in 1 uTorrent 1.7.7 build 8179 and earlier and 2 BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long Created By field in a .torrent file...

CVE-2008-4434

Stack-based buffer overflow in 1 uTorrent 1.7.7 build 8179 and earlier and 2 BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long Created By field in a .torrent file...

CVE-2008-4434

The CVE-2008-4434 issue is a stack-based buffer overflow in the torrent clients uTorrent (1.7.7 build 8179 and earlier) and BitTorrent (6.0.3 build 8642 and earlier). The vulnerability is triggered by a long Created By field in a .torrent file, allowing remote attackers to cause a crash (DoS) and...

KLA10089 DoS vulnerability in Torrent

A buffer overflow was found in the BitTorrent & UTorrent. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .torrent file. Original advisories - Related products...

uTorrent种子文件created by字段栈溢出漏洞

BUGTRAQ ID: 30653 BitTorrent和uTorrent都是流行的bittorrent协议客户端，使用了相同的代码库。 BitTorrent和uTorrent没有正确地处理.torrent文件，如果用户受骗打开了带有超长created by字段的.torrent种子文件的话，就可以触发栈溢出，导致执行任意代码。 BitTorrent BitTorrent 6.0.3 BitTorrent uTorrent 1.7.7 BitTorrent ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit

No description provided by source. !/usr/bin/perl uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit according to the following advisory: http://secunia.com/advisories/30605 usage: WebUI-dos.pl url port user:pass Exploit written by Exodus...

μTorrent (uTorrent) BitTorrent WebIU HTTP 1.7.76.0.1 - Range header Denial of Service

μTorrent uTorrent BitTorrent WebIU HTTP 1.7.76.0.1 - Range header Denial of Service !/usr/bin/perl uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit according to the following advisory: http://secunia.com/advisories/30605 usage: WebUI-dos.pl Exploit written by...

uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit

Exploit for unknown platform in category dos / poc ===================================================================== uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit ===================================================================== !/usr/bin/perl uTorrent / BitTorrent...

uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit

No description provided by source. !/usr/bin/perl uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit according to the following advisory: http://secunia.com/advisories/30605 usage: WebUI-dos.pl url port user:pass Exploit written by Exodus. http://www.blackhat.org....

μTorrent (uTorrent) / BitTorrent WebIU HTTP 1.7.7/6.0.1 - Range header Denial of Service

!/usr/bin/perl uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit according to the following advisory: http://secunia.com/advisories/30605 usage: WebUI-dos.pl Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; use MIME::Base64; if@ARGV newPeerAd...

CVE-2008-0071

The Web UI interface in 1 BitTorrent before 6.0.3 build 8642 and 2 uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service application crash via an HTTP request with a malformed Range header...

Design/Logic Flaw

The Web UI interface in 1 BitTorrent before 6.0.3 build 8642 and 2 uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service application crash via an HTTP request with a malformed Range header...

CVE-2008-0071

The Web UI interface in 1 BitTorrent before 6.0.3 build 8642 and 2 uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service application crash via an HTTP request with a malformed Range header...

CVE-2008-0071

CVE-2008-0071 affects BitTorrent before 6.0.3 build 8642 and uTorrent before 1.8beta build 10524. The flaw is in the Web UI handling of HTTP requests with a malformed Range header, allowing remote attackers to cause a denial-of-service (application crash). The vulnerability is exposed when the We...

uTorrent和BitTorrent HTTP Range头远程拒绝服务漏洞

BUGTRAQ ID: 29661 CVECAN ID: CVE-2008-0071 BitTorrent和uTorrent都是流行的bittorrent协议客户端，使用了相同的代码库。 BitTorrent和uTorrent没有正确地处理HTTP请求，如果远程攻击者发送了带有畸形Range头字符串的HTTP请求的话，就可能导致客户端崩溃。成功利用这个漏洞要求启用了Web UI界面，而这不是默认配置。 BitTorrent BitTorrent 6.0.1 BitTorrent uTorrent 1.7.7 BitTorrent ----------...

uTorrent / BitTorrent DoS

Web UI HTTP request Range: header DoS...

[Full-disclosure] Secunia Research: uTorrent / BitTorrent Web UI HTTP "Range" Header DoS

====================================================================== Secunia Research 11/06/2008 - uTorrent / BitTorrent Web UI HTTP "Range" Header DoS - ====================================================================== Table of Contents Affected...

TorrentTrader scrape.php脚本SQL注入漏洞

BUGTRAQ ID: 29451 TorrentTrader是用PHP编写的torrent tracker平台。 TorrentTrader在验证访问IP列表时存在SQL漏洞，远程攻击者可能利用此漏洞绕过访问限制。 如果要下载受限制的torrent，用户要登录到TorrentTrader，然后其IP储存在许可用户的列表中。当bittorrent客户端连接时，会检查这个IP地址是否为许可用户列表中的地址。...

torrenttrader-sql.txt

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier Discovered by: Charles Vaughn [email protected] Software: http://sourceforge.net/projects/torrenttrader Status: Vendor Notified, updated version available Vulnerability TorrentTrader is a popular torrent...

BitTorrent Clients and CSRF

The following are proof of concept exploits against three bittorrent clients. uTorrent' WebUI, Azurues's "HTML WebUI", and TorrentFlux. More information: http://www.rooksecurity.com/blog/?p=10 TorrentFlux v2.3Latest http://sourceforge.net/projects/torrentflux/ If you force TorrentFlux to download...