KLA10089 DoS vulnerability in Torrent

A buffer overflow was found in the BitTorrent & UTorrent. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .torrent file. Original advisories - Exploitation Publi...

uTorrent种子文件created by字段栈溢出漏洞

BUGTRAQ ID: 30653 BitTorrent和uTorrent都是流行的bittorrent协议客户端，使用了相同的代码库。 BitTorrent和uTorrent没有正确地处理.torrent文件，如果用户受骗打开了带有超长created by字段的.torrent种子文件的话，就可以触发栈溢出，导致执行任意代码。 BitTorrent BitTorrent 6.0.3 BitTorrent uTorrent 1.7.7 BitTorrent ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit

No description provided by source. !/usr/bin/perl uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit according to the following advisory: http://secunia.com/advisories/30605 usage: WebUI-dos.pl url port user:pass Exploit written by Exodus...

uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit

Exploit for unknown platform in category dos / poc ===================================================================== uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit ===================================================================== !/usr/bin/perl uTorrent / BitTorrent...

μTorrent (uTorrent) BitTorrent WebIU HTTP 1.7.76.0.1 - Range header Denial of Service

μTorrent uTorrent BitTorrent WebIU HTTP 1.7.76.0.1 - Range header Denial of Service !/usr/bin/perl uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit according to the following advisory: http://secunia.com/advisories/30605 usage: WebUI-dos.pl Exploit written by...

uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit

No description provided by source. !/usr/bin/perl uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit according to the following advisory: http://secunia.com/advisories/30605 usage: WebUI-dos.pl url port user:pass Exploit written by Exodus. http://www.blackhat.org....

μTorrent (uTorrent) / BitTorrent WebIU HTTP 1.7.7/6.0.1 - Range header Denial of Service

!/usr/bin/perl uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit according to the following advisory: http://secunia.com/advisories/30605 usage: WebUI-dos.pl Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; use MIME::Base64; if@ARGV newPeerAd...

Design/Logic Flaw

The Web UI interface in 1 BitTorrent before 6.0.3 build 8642 and 2 uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service application crash via an HTTP request with a malformed Range header...

CVE-2008-0071

The Web UI interface in 1 BitTorrent before 6.0.3 build 8642 and 2 uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service application crash via an HTTP request with a malformed Range header...

CVE-2008-0071

CVE-2008-0071 affects BitTorrent before 6.0.3 build 8642 and uTorrent before 1.8beta build 10524. The flaw is in the Web UI handling of HTTP requests with a malformed Range header, allowing remote attackers to cause a denial-of-service (application crash). The vulnerability is exposed when the We...

CVE-2008-0071

The Web UI interface in 1 BitTorrent before 6.0.3 build 8642 and 2 uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service application crash via an HTTP request with a malformed Range header...

CVE-2008-0071: Improper Input Validation

The Web UI interface in 1 BitTorrent before 6.0.3 build 8642 and 2 uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service application crash via an HTTP request with a malformed Range header...

uTorrent和BitTorrent HTTP Range头远程拒绝服务漏洞

BUGTRAQ ID: 29661 CVECAN ID: CVE-2008-0071 BitTorrent和uTorrent都是流行的bittorrent协议客户端，使用了相同的代码库。 BitTorrent和uTorrent没有正确地处理HTTP请求，如果远程攻击者发送了带有畸形Range头字符串的HTTP请求的话，就可能导致客户端崩溃。成功利用这个漏洞要求启用了Web UI界面，而这不是默认配置。 BitTorrent BitTorrent 6.0.1 BitTorrent uTorrent 1.7.7 BitTorrent ----------...

uTorrent / BitTorrent DoS

Web UI HTTP request Range: header DoS...

[Full-disclosure] Secunia Research: uTorrent / BitTorrent Web UI HTTP "Range" Header DoS

====================================================================== Secunia Research 11/06/2008 - uTorrent / BitTorrent Web UI HTTP "Range" Header DoS - ====================================================================== Table of Contents Affected...

TorrentTrader scrape.php脚本SQL注入漏洞

BUGTRAQ ID: 29451 TorrentTrader是用PHP编写的torrent tracker平台。 TorrentTrader在验证访问IP列表时存在SQL漏洞，远程攻击者可能利用此漏洞绕过访问限制。 如果要下载受限制的torrent，用户要登录到TorrentTrader，然后其IP储存在许可用户的列表中。当bittorrent客户端连接时，会检查这个IP地址是否为许可用户列表中的地址。...

torrenttrader-sql.txt

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier Discovered by: Charles Vaughn [email protected] Software: http://sourceforge.net/projects/torrenttrader Status: Vendor Notified, updated version available Vulnerability TorrentTrader is a popular torrent...

BitTorrent Clients and CSRF

The following are proof of concept exploits against three bittorrent clients. uTorrent' WebUI, Azurues's "HTML WebUI", and TorrentFlux. More information: http://www.rooksecurity.com/blog/?p=10 TorrentFlux v2.3Latest http://sourceforge.net/projects/torrentflux/ If you force TorrentFlux to download...

torrent-pwnage.txt

The following are proof of concept exploits against three bittorrent clients. uTorrent' WebUI, Azurues's "HTML WebUI", and TorrentFlux. More information: http://www.rooksecurity.com/blog/?p=10 TorrentFlux v2.3Latest http://sourceforge.net/projects/torrentflux/ If you force TorrentFlux to download...

Fedora 7 : deluge-0.5.8.3-1.fc7 (2008-1288)

Version 0.5.8.3 of the Deluge BitTorrent client contains a security fix for a remote exploit which could cause Deluge to crash. It also fixes some high CPU usage spikes, loading issues with the BlocklistImport plugin, and lock-ups when the tracker returns data that is not properly UTF8-encoded...