Lucene search

K
cve[email protected]CVE-2005-1122
HistoryApr 16, 2005 - 4:00 a.m.

CVE-2005-1122

2005-04-1604:00:00
CWE-134
web.nvd.nist.gov
20
cve-2005-1122
format string vulnerability
monkey daemon
denial of service
arbitrary code
http
double-encoded format string
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka “double expansion error”).

Affected configurations

NVD
Node
monkey-projectmonkeyRange0.9.0
OR
monkey-projectmonkeyMatch0.1.1
OR
monkey-projectmonkeyMatch0.5.2
OR
monkey-projectmonkeyMatch0.6.0
OR
monkey-projectmonkeyMatch0.6.1
OR
monkey-projectmonkeyMatch0.6.2
OR
monkey-projectmonkeyMatch0.6.3
OR
monkey-projectmonkeyMatch0.7.0
OR
monkey-projectmonkeyMatch0.7.1
OR
monkey-projectmonkeyMatch0.7.2
OR
monkey-projectmonkeyMatch0.8.0
OR
monkey-projectmonkeyMatch0.8.1
OR
monkey-projectmonkeyMatch0.8.2
OR
monkey-projectmonkeyMatch0.8.3
OR
monkey-projectmonkeyMatch0.8.4
OR
monkey-projectmonkeyMatch0.8.42
OR
monkey-projectmonkeyMatch0.8.5

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

Related for CVE-2005-1122