First published: Mon Jun 16 2008(Updated: )
The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.
Credit: PSIRT-CNA@flexerasoftware.com
Affected Software | Affected Version | How to fix |
---|---|---|
BitTorrent | =4.0.4 | |
BitTorrent | =4.20.4 | |
BitTorrent | =4.27.2 | |
BitTorrent | =4.1.3 | |
BitTorrent | =4.3.2 | |
BitTorrent | =4.26.0 | |
BitTorrent | =1.4 | |
BitTorrent | =5.2.0 | |
BitTorrent | =5.0.8 | |
BitTorrent | =4.20.7 | |
BitTorrent | =5.0.0 | |
BitTorrent | =1.4.2 | |
BitTorrent | =1.7.3 | |
BitTorrent | =4.0.1 | |
BitTorrent | =1.2.2 | |
BitTorrent | =1.6 | |
BitTorrent | =4.1.0 | |
BitTorrent | =4.1.4 | |
BitTorrent | =4.3.0 | |
BitTorrent | =1.3 | |
BitTorrent | =6.0 | |
BitTorrent | =4.9.4 | |
BitTorrent | =1.7.4 | |
BitTorrent | =4.20.2 | |
BitTorrent | =1.1.1 | |
BitTorrent | =4.20.1 | |
BitTorrent | =4.3.1 | |
BitTorrent | =4.3.4 | |
BitTorrent | =1.7.2 | |
BitTorrent | =4.2.0 | |
BitTorrent | =4.0.2 | |
BitTorrent | =4.9.6 | |
BitTorrent | =4.22.1 | |
BitTorrent | =4.2.2 | |
BitTorrent | =4.1.6 | |
BitTorrent | =5.0.6 | |
BitTorrent | =4.20.0 | |
BitTorrent | =4.2.1 | |
BitTorrent | =4.9.7 | |
BitTorrent | =4.9.9 | |
BitTorrent | =6.0.1 | |
BitTorrent | =3.9.1 | |
BitTorrent | =4.9.3 | |
BitTorrent | =4.1.2 | |
BitTorrent | =1.1.6 | |
BitTorrent | =5.0.3 | |
BitTorrent | =5.0.4 | |
BitTorrent | <=1.7.7 | |
BitTorrent | =1.5 | |
BitTorrent | =1.1.3 | |
BitTorrent | =4.4.1 | |
BitTorrent | =4.1.7 | |
BitTorrent | =4.22.4 | |
BitTorrent | =1.1.5 | |
BitTorrent | =4.0.0 | |
BitTorrent | =4.22.0 | |
BitTorrent | =5.0.1 | |
BitTorrent | =1.7.5 | |
BitTorrent | =1.2.1 | |
BitTorrent | =4.24.0 | |
BitTorrent | =4.3.3 | |
BitTorrent | =4.24.2 | |
BitTorrent | =4.1.5 | |
BitTorrent | =5.0.7 | |
BitTorrent | =5.0.5 | |
BitTorrent | =4.3.5 | |
BitTorrent | =1.2 | |
BitTorrent | =4.20.9 | |
BitTorrent | =1.1.7 | |
BitTorrent | =4.27.1 | |
BitTorrent | =1.7 | |
BitTorrent | =4.9.8 | |
BitTorrent | =1.1.4 | |
BitTorrent | =4.9.2 | |
BitTorrent | =4.9.5 | |
BitTorrent | =4.1.1 | |
BitTorrent | =4.1.8 | |
BitTorrent | =4.3.6 | |
BitTorrent | =1.7.1 | |
BitTorrent | =4.20.6 | |
BitTorrent | =4.20.8 | |
BitTorrent | =4.0.3 | |
BitTorrent | =1.7.6 | |
BitTorrent | <=6.0.2 | |
BitTorrent | =5.0.9 | |
BitTorrent | =5.0.2 | |
BitTorrent | =4.4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-0071 is classified as a denial of service vulnerability, causing crashes in affected software versions.
To fix CVE-2008-0071, update BitTorrent or uTorrent to a version that is not affected, specifically versions 6.0.3 or later for BitTorrent and 1.8beta build 10524 or later for uTorrent.
CVE-2008-0071 affects various versions of BitTorrent and uTorrent, specifically versions prior to 6.0.3 and 1.8beta build 10524 respectively.
Yes, CVE-2008-0071 can be exploited remotely via an HTTP request containing a malformed Range header.
The primary impact of CVE-2008-0071 is a denial of service, leading to crashes of the affected applications.