Back to Database
Status published
Medium
CVE-2008-0071
The Web UI interface in (1) BitTorrent before 6.0.3 build...
Vulnerability Description
The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-0071
Credits & Attribution
No credits recorded in the NVD database.
References
- http://securityreason.com/securityalert/3943
- http://secunia.com/advisories/28703
- http://secunia.com/secunia_research/2008-7/advisory/
- http://www.securityfocus.com/bid/29661
- http://www.vupen.com/english/advisories/2008/1809
- http://secunia.com/advisories/30605
- http://www.vupen.com/english/advisories/2008/1808
- http://securitytracker.com/id?1020266
- http://www.securityfocus.com/archive/1/493269/100/0/threaded
- http://www.securitytracker.com/id?1020265
- https://www.exploit-db.com/exploits/5918
More from bittorrent
View All →CVE-2020-8437
The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505)...
High
7.5
CVE-2015-5685
The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht )...
High
7.5
CVE-2015-5474
BitTorrent and uTorrent allow remote attackers to inject command line...
Critical
9.3
CVE-2015-2846
BitTorrent Sync allows remote attackers to execute arbitrary commands via...
Critical
9.3
CVE-2014-8515
The web interface in BitTorrent allows remote attackers to execute...
Medium
6.8
Affected Vendor
bittorrent
View all reports →Affected Software
bittorrent, utorrent
Vulnerable Versions:
0, 3.9.1, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.1.6, 4.1.7, 4.1.8, 4.2.0, 4.2.1, 4.2.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.4.0, 4.4.1, 4.9.2, 4.9.3, 4.9.4, 4.9.5, 4.9.6, 4.9.7, 4.9.8, 4.9.9, 4.20.0, 4.20.1, 4.20.2, 4.20.4, 4.20.6, 4.20.7, 4.20.8, 4.20.9, 4.22.0, 4.22.1, 4.22.4, 4.24.0, 4.24.2, 4.26.0, 4.27.1, 4.27.2, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.2.0, 6.0, 6.0.1, 1.1.1, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.2, 1.2.1, 1.2.2, 1.3, 1.4, 1.4.2, 1.5, 1.6, 1.7, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6
Timeline
Official Publish:
June 16th, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.