CVE-2008-3429

CVSS V2 Medium 6.8 CVSS V3 None
Description
Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL.
Overview
  • CVE ID
  • CVE-2008-3429
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2008-07-31T22:41:00
  • Last Modified Date
  • 2017-08-08T01:31:52
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:httrack:httrack:0.23:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:0.24:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:0.25:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:0.99:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:0.996:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:0.997:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:0.998:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.02:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.03:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.04:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.10:b:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.10:c:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.10:d:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.10:e:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.15:b:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.16:b:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.20:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.21:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.22:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.23:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.24:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:1.30:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:2.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:2.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:2.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:2.02:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.02:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.03:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.04:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.06:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.07:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.08:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.09:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.16:2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.20:2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.21:8:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.22:3:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.23:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.30:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.31:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.32:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.33:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.40:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.40:2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.41:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.41:2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.41:3:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.42:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.42:2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:httrack:3.42:3:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:*:2:*:*:*:*:*:* 1 OR 3.42
cpe:2.3:a:httrack:winhttrack:0.23:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:0.24:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:0.25:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:0.99:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:0.996:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:0.997:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:0.998:beta-2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.02:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.03:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.04:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.10:b:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.10:c:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.10:d:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.10:e:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.16:b:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.20:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.21:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.22:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.23:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.24:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:1.30:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:2.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:2.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:2.02:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:2.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.02:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.03:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.04:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.06:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.07:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.08:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.09:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.15:b:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.16:2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.20:2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.21:8:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.22:3:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.23:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.30:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.31:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.32:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.33:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.40:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.40:2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.41:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.41:2:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.41:3:*:*:*:*:*:* 1 OR
cpe:2.3:a:httrack:winhttrack:3.42:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:P/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 6.8
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 6.4
References
Reference URL Reference Tags
http://www.venustech.com.cn/NewsInfo/124/2032.Html
http://www.httrack.com/history.txt
http://www.securityfocus.com/bid/30425
http://secunia.com/advisories/31380
http://www.debian.org/security/2008/dsa-1626
http://secunia.com/advisories/31323/
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00711.html
http://secunia.com/advisories/31866
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00707.html
http://www.vupen.com/english/advisories/2008/2221/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/44167
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2008-3429
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3429
History
Created Old Value New Value Data Type Notes
2022-05-10 09:06:48 Added to TrackCVE