monkey-project monkey vulnerabilities and exploits

(subscribe to this query)

Monkey HTTP Server prior to 1.5.3, when the File Descriptor Table (FDT) is enabled and custom error messages are set, allows remote malicious users to cause a denial of service (file descriptor consumption) via an HTTP request that triggers an error message.

Monkey daemon (monkeyd) prior to 0.9.1 allows remote malicious users to cause a denial of service (memory corruption) via a request for a zero byte file.

Monkey-project Monkey 0.8.0 Monkey-project Monkey 0.8.3 Monkey-project Monkey 0.7.0 Monkey-project Monkey 0.5.2 Monkey-project Monkey 0.8.1 Monkey-project Monkey 0.8.5 Monkey-project Monkey 0.8.4 Monkey-project Monkey 0.7.2 Monkey-project Monkey 0.6.0 Monkey-project Monkey 0.6.1 Monkey-project Monkey 0.6.2 Monkey-project Monkey Monkey-project Monkey 0.8.2 Monkey-project Monkey 0.7.1 Monkey-project Monkey 0.6.3 Monkey-project Monkey 0.1.1

Format string vulnerability in cgi.c for Monkey daemon (monkeyd) prior to 0.9.1 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka "double expansion er...

Monkey-project Monkey 0.8.0 Monkey-project Monkey 0.7.0 Monkey-project Monkey 0.7.2 Monkey-project Monkey 0.8.5 Monkey-project Monkey 0.8.4 Monkey-project Monkey 0.8.3 Monkey-project Monkey 0.6.1 Monkey-project Monkey 0.6.2 Monkey-project Monkey 0.6.3 Monkey-project Monkey 0.5.2 Monkey-project Monkey Monkey-project Monkey 0.8.1 Monkey-project Monkey 0.8.2 Monkey-project Monkey 0.7.1 Monkey-project Monkey 0.6.0 Monkey-project Monkey 0.1.1

The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and previous versions allows remote malicious users to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.

Monkey-project Monkey 0.7.1 Monkey-project Monkey 0.7.2 Monkey-project Monkey Monkey-project Monkey 0.8.0 Monkey-project Monkey 0.7.0 Monkey-project Monkey 0.5.2 Monkey-project Monkey 0.1.1 Monkey-project Monkey 0.6.0 Monkey-project Monkey 0.6.1 Monkey-project Monkey 0.6.2 Monkey-project Monkey 0.6.3

1 EDB exploit

The Post_Method function in Monkey HTTP Daemon prior to 0.6.2 allows remote malicious users to cause a denial of service (crash) via a POST request without a Content-Type header.

Monkey-project Monkey Monkey-project Monkey 0.6.0 Monkey-project Monkey 0.5.2 Monkey-project Monkey 0.1.1

Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and previous versions allows remote malicious users to execute arbitrary code via a POST request with a large body.

Monkey-project Monkey 0.6.0 Monkey-project Monkey 0.5.2 Monkey-project Monkey Monkey-project Monkey 0.1.1

Monkey HTTP Daemon (monkeyd) prior to 1.2.2 allows remote malicious users to cause a denial of service (infinite loop) via an offset equal to the file size in the Range HTTP header.

Monkey-project Monkey Monkey-project Monkey 1.2.0

The Mandril security plugin in Monkey HTTP Daemon (monkeyd) prior to 1.5.0 allows remote malicious users to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.

Monkey-project Monkey

1 EDB exploit

The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.

Monkey-project Monkey -

Monkey HTTP Daemon has local security bypass

Monkey-project Monkey -

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook