oss-security - Re: CVE request: httrack buffer overflow

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Mon, 4 Aug 2008 12:38:13 +0200
From: Thijs Kinkhorst <thijs@...ian.org>
To: oss-security@...ts.openwall.com
Cc: coley@...re.org
Subject: Re: CVE request: httrack buffer overflow

On Monday 4 August 2008 12:21, Tomas Hoger wrote:
> CVE-2008-3429 ?
>
> Buffer overflow in URI processing in HTTrack and WinHTTrack before
> 3.42-3 allows remote attackers to cause a denial of service (crash) and
> possibly execute arbitrary code via a long URL.
>
> http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3429

Thanks! I somehow missed that one...


Thijs

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.