CVE-2012-4442: Undefined Security Weakness

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check...

CVE-2012-4443: Undefined Security Weakness

Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to gain privileges by leveraging cgi-bin write access...

CVE-2012-5303: Improper Link Resolution Before File Access

Monkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink attack on a PID file, as demonstrated by a pathname different from the default /var/run/monkey.pid pathname...

Monkey HTTP Daemon < 0.9.3 Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc ========================================================== Monkey HTTP Daemon " % argv0 sys.exit0 host = argv1 port = intargv2 print " target: %s:%d" % host, port payload = GET payload += "HTTP/1.1\r\nConnection:\n\r\n\r\n"; print " payload: %s" ...

Monkey HTTP Daemon < 0.9.3 - Denial of Service

Monkey HTTP Daemon is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Versions prior to Monkey HTTP Daemon 0.9.3 are vulnerable. !/usr/bin/env python monkeyex.py -- Patroklos Argyroudis, ar...

Monkey HTTP Daemon 0.9.3 - Denial of Service

Monkey HTTP Daemon 0.9.3 - Denial of Service Monkey HTTP Daemon is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Versions prior to Monkey HTTP Daemon 0.9.3 are vulnerable. !/usr/bin/env...

Monkey HTTP Daemon Invalid HTTP 'Connection' Header Denial Of Service Vulnerability

Monkey HTTP Daemon is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Versions prior to Monkey HTTP Daemon 0.9.3 are vulnerable. OpenVAS Vulnerability Test $Id: monkeyhttp37307.nasl 5390...

CVE-2002-2154

CVE-2002-2154 describes a directory traversal vulnerability in the web server component Monkey HTTP Daemon 0.1.4. Remote attackers can read arbitrary files by using dot-dot sequences in the request path. The problem is documented across multiple feeds (NVD, Red Hat advisories, CVE listings) with ...

CVE-2002-2154

Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. dot dot sequences...

CVE-2002-2154: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. dot dot sequences...

CVE-2002-1663

The PostMethod function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service crash via a POST request with an invalid or missing Content-Length header value...

CVE-2002-1663

Monkey HTTP Server (monkeyd) is affected by CVE-2002-1663 through the Post_Method function in method.c, where a crafted POST request with an invalid or missing Content-Length header can crash the server and cause a denial of service. The vulnerability is reported for versions prior to 0.5.1. The ...

CVE-2003-1209

The PostMethod function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service crash via a POST request without a Content-Type header...

CVE-2003-1209

The vulnerability CVE-2003-1209 affects Monkey HTTP Daemon prior to 0.6.2. A POST request without a Content-Type header can cause the server to crash, resulting in a denial of service. The description and connected records confirm the affected product (Monkey HTTP Daemon) and the root cause (like...

CVE-2002-1663: Improper Input Validation

The PostMethod function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service crash via a POST request with an invalid or missing Content-Length header value...

CVE-2003-1209: Improper Input Validation

The PostMethod function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service crash via a POST request without a Content-Type header...

Monkey HTTP Daemon < 0.9.1 Multiple Vulnerabilities

Binary data 2835.prm...

CVE-2004-0276

The getrealstring function in Monkey HTTP Daemon monkeyd 0.8.1 and earlier allows remote attackers to cause a denial of service crash via an HTTP request with a sequence of "%" characters and a missing Host field...

CVE-2004-0276

The getrealstring function in Monkey HTTP Daemon monkeyd 0.8.1 and earlier allows remote attackers to cause a denial of service crash via an HTTP request with a sequence of "%" characters and a missing Host field...

CVE-2004-0276

The CVE-2004-0276 entry concerns Monkey HTTP Daemon (monkeyd) versions up to and including 0.8.1. The vulnerability is in the get_real_string function, where processing an HTTP request containing a sequence of "%" characters and a missing Host header can cause the daemon to crash, resulting in a ...