VDB
CVE-2008-0071
CVE-2008-0071
PUBLISHED
CVSS 4.300000190734863 MEDIUM
The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.
EPSS 7.19% · 94.2th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
7.19%
94.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| utorrent | utorrent | 1.1.1, 1.1.4, 1.1.6 |
| n/a | n/a | n/a |
| bittorrent | bittorrent | 0, 3.9.1, 4.0.0 |
Timeline
- Jun 16, 2008 CVE Published
- Jun 23, 2008 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
References
- http://secunia.com/secunia_research/2008-7/advisory/ url
- 29661 vdb
- 30605 third-party-advisory
- ADV-2008-1808 vdb
- 1020266 vdb
- 1020265 vdb
- 5918 exploit
- 3943 third-party-advisory
- 28703 third-party-advisory
- ADV-2008-1809 vdb
- 20080611 Secunia Research: uTorrent / BitTorrent Web UI HTTP "Range" Header DoS mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2008-0071 advisory
- http://secunia.com/secunia_research/2008-7/advisory url