oss-sec mailing list archives

Re: CVE request: httrack buffer overflow

From: Tomas Hoger <thoger () redhat com>
Date: Mon, 4 Aug 2008 12:21:02 +0200

On Mon, 4 Aug 2008 11:42:15 +0200 Thijs Kinkhorst <thijs () debian org>
wrote:

Please see:
http://www.frsirt.com/english/advisories/2008/2221
http://www.debian.org/security/2008/dsa-1626

Could we get a CVE name assigned to that please?


CVE-2008-3429 ?

Buffer overflow in URI processing in HTTrack and WinHTTrack before
3.42-3 allows remote attackers to cause a denial of service (crash) and
possibly execute arbitrary code via a long URL.

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3429

-- 
Tomas Hoger / Red Hat Security Response Team

Current thread:

CVE request: httrack buffer overflow Thijs Kinkhorst (Aug 04)
- Re: CVE request: httrack buffer overflow Tomas Hoger (Aug 04)
  - Re: CVE request: httrack buffer overflow Thijs Kinkhorst (Aug 04)
    - Re: CVE request: httrack buffer overflow Steven M. Christey (Aug 04)
    - source for CVE feed (was: Re: [oss-security] CVE request: httrack buffer overflow) Thijs Kinkhorst (Aug 04)
    - Re: source for CVE feed (was: Re: [oss-security] CVE request: httrack buffer overflow) Steven M. Christey (Aug 04)
    - Re: Re: source for CVE feed (was: Re: [oss-security] CVE request: httrack buffer overflow) Nico Golde (Aug 04)
    - Re: source for CVE feed (was: Re: [oss-security] CVE request: httrack buffer overflow) Steven M. Christey (Aug 04)