CVE-2008-3688

Published: Aug 14, 2008Modified: Apr 23, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-responsive server, which triggers an infinite loop due to an uninitialized variable.

Affected (1)

Products: Havp: Http Antivirus Proxy

Havp

1 product

Http Antivirus Proxy

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Havp Http Antivirus Proxy	Version 0.88

Related CWEs

CWE-908

Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

References (16)

http://secunia.com/advisories/31494

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/31971

Source: cve@mitre.org

Broken Link

http://www.gentoo.org/security/en/glsa/glsa-200809-11.xml

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/30697

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1020900

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.server-side.de/index.htm

Source: cve@mitre.org

Broken LinkProduct

https://exchange.xforce.ibmcloud.com/vulnerabilities/44467

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://sourceforge.net/mailarchive/message.php?msg_name=487CDF51.5060201%40endian.com

Source: cve@mitre.org

Broken LinkPatch

http://secunia.com/advisories/31494