CVE-2008-2040

Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in...

7.5 HighPublic exploitFix available

Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in Peercast 0.1218 and gnome-peercast allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Basic Authentication string with a long (1) username or (2) password.

Exploit likelihood

14.9%Down 22.5 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2008-2040
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-2040
Updated: 2026-11-02

EUVDEUVD-2008-2037 No score

Record: EUVD-2008-2037
Updated: 2026-11-03

GitHub AdvisoriesGHSA-98qj-hw8j-wp56 No score

Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in...

Record: GHSA-98qj-hw8j-wp56
Weakness: CWE-119
Updated: 2026-11-02

Affected products

peercast

Affected packages

Affected packages
Package	Affected	Fixed
`peercast` Debian:4.0	before 0.1217.toots.20060314-1etch1, plus listed versions 0.1217.toots.20060314-10.1217.toots.20060314-1etch0	0.1217.toots.20060314-1etch1
`gnome-peercast` Debian:4.0 From an advisory covering 2 CVEs	before 0.5.4-1.1etch0, plus listed versions 0.5.4-1.1	0.5.4-1.1etch0

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	PeerCast 0.1218 - 'getAuthUserPass' Multiple Buffer Overflow Vulnerabilities	2008-04-29

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-2040 is a high vulnerability (CVSS 7.5) in Peercast, published April 30, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.9%, the 96th percentile. Fixed in peercast 0.1217.toots.20060314-1etch1.

References

Show 10 moreShow less