Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

HAVP 0.88 can hang when contacting dead server

CVE-2008-3688 · published 18 years ago
Summary

The HTTP Antivirus Proxy version 0.88 may stop responding if it tries to connect to a server that does not answer. This happens because a programming mistake creates an endless loop, effectively causing a denial of service. Update to a newer version or apply the vendor’s patch to prevent the hang.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
havp http_antivirus_proxy 0.88
cpe:2.3:a:havp:http_antivirus_proxy:0.88:*:*:*:*:*:*:*
Original advisory text
sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-responsive server, which triggers an infinite loop due to an...
sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-responsive server, which triggers an infinite loop due to an uninitialized variable.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
3% chance of attack within 30 days
Type
CWE-908Use of Uninitialized Resource
Timeline
Published14 Aug 2008
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2008-3688 · NVD
Track software like this
Free during beta