CVE-2008-3429

Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL.

Link	Resource
http://www.venustech.com.cn/NewsInfo/124/2032.Html
http://www.httrack.com/history.txt
http://www.securityfocus.com/bid/30425
http://secunia.com/advisories/31380
http://www.debian.org/security/2008/dsa-1626
http://secunia.com/advisories/31323/
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00711.html
http://secunia.com/advisories/31866
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00707.html
http://www.vupen.com/english/advisories/2008/2221/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/44167

Configuration 1

cpe:2.3:a:httrack:httrack:0.99:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.10:c:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.08:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.04:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.10:e:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:0.25:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.20:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.22:3:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.10:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:2.01:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.10:d:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.41:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.04:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:0.998:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.40:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.41:3:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.15:b:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.16:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.00:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.11:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.10:b:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.10:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.30:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.11:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.21:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.20:2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:0.24:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:0.998:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.01:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:2.2:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:2.00:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:0.23:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.40:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.07:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.21:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:0.997:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.09:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:2.01:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.41:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.00:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:2.00:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.06:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.42:3:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.40:2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.10:e:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.15:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.22:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.23:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.03:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.04:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.15:b:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.06:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.23:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:0.997:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.16:b:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:*:2:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.32:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.31:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:0.996:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.00:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.40:2:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.30:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.21:8:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.10:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:0.99:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.01:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.21:8:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:0.23:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.24:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.05:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.42:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.22:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.01:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.03:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.10:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.32:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.41:3:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.31:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.04:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.15:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.16:b:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.15:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.42:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.20:2:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.08:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.01:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.16:2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.07:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.42:2:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.16:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.02:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.16:2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.10:b:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:2.02:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.41:2:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.02:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:0.996:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.00:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.23:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.22:3:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.10:c:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.20:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:1.02:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:2.02:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:0.24:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.33:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.03:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.09:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.23:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:2.2:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:0.25:beta-2:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.05:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.30:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.33:*:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.03:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.02:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.10:d:*:*:*:*:*:* cpe:2.3:a:httrack:winhttrack:3.15:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.30:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:1.24:*:*:*:*:*:*:* cpe:2.3:a:httrack:httrack:3.41:2:*:*:*:*:*:*

---

Published : 2008-07-31 10:41

Updated : 2017-08-08 01:31

---

NVD link : CVE-2008-3429

Mitre link : CVE-2008-3429

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer