oss-sec mailing list archives

Re: CVE request: httrack buffer overflow

From: Thijs Kinkhorst <thijs () debian org>
Date: Mon, 4 Aug 2008 12:38:13 +0200

On Monday 4 August 2008 12:21, Tomas Hoger wrote:

CVE-2008-3429 ?

Buffer overflow in URI processing in HTTrack and WinHTTrack before
3.42-3 allows remote attackers to cause a denial of service (crash) and
possibly execute arbitrary code via a long URL.

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3429


Thanks! I somehow missed that one...


Thijs

Attachment: _bin
Description:

Current thread:

CVE request: httrack buffer overflow Thijs Kinkhorst (Aug 04)
- Re: CVE request: httrack buffer overflow Tomas Hoger (Aug 04)
  - Re: CVE request: httrack buffer overflow Thijs Kinkhorst (Aug 04)
    - Re: CVE request: httrack buffer overflow Steven M. Christey (Aug 04)
    - source for CVE feed (was: Re: [oss-security] CVE request: httrack buffer overflow) Thijs Kinkhorst (Aug 04)
    - Re: source for CVE feed (was: Re: [oss-security] CVE request: httrack buffer overflow) Steven M. Christey (Aug 04)
    - Re: Re: source for CVE feed (was: Re: [oss-security] CVE request: httrack buffer overflow) Nico Golde (Aug 04)
    - Re: source for CVE feed (was: Re: [oss-security] CVE request: httrack buffer overflow) Steven M. Christey (Aug 04)