CVE-2002-1663

The PostMethod function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service crash via a POST request with an invalid or missing Content-Length header value...

CVE-2002-2154

Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. dot dot sequences...

CVE-2002-1852

Cross-site scripting XSS vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via 1 the URL or 2 a parameter to test2.pl...

Monkey HTTP Server 0.40.5 - Invalid POST Denial of Service

Monkey HTTP Server 0.40.5 - Invalid POST Denial of Service source: https://www.securityfocus.com/bid/6096/info A denial of service vulnerability has been reported for Monkey HTTP server. The vulnerability is due to inadequate checks being performed when decoding POST requests. An attacker can...

Monkey HTTP Server 0.4/0.5 - Invalid POST Denial of Service

source: https://www.securityfocus.com/bid/6096/info A denial of service vulnerability has been reported for Monkey HTTP server. The vulnerability is due to inadequate checks being performed when decoding POST requests. An attacker can exploit this vulnerability by issuing a POST request with an...

Crossite scripting in Monkey

www.victim.com/scriptalert'IIL0wnZYoU!!!';/script...

XSS bug in Monkey (0.5.0) HTTP server

Illegal Instruction Labs Advisory ------------------------------------------------------------------------- Advisory name: XSS bug in Monkey 0.5.0 HTTP server Advisory number: 14 Application: Monkey 0.5.0 HTTP server Application author: Eduardo Silva EdsipeR Author e-mail: [email protected]...

Monkey HTTP Server 0.10.40.5 - Multiple Cross-Site Scripting Vulnerabilities

Monkey HTTP Server 0.10.40.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/5829/info Monkey HTTP server is prone to cross site scripting vulnerabilities. An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link...

IIL Advisory: Reverse traversal vulnerability in Monkey (0.1.4) HTTP server

Illegal Instruction Labs Advisory ------------------------------------------------------------------------- Advisory name: Reverse traversal vulnerability in Monkey 0.1.4 HTTP server Advisory number: 12 Application: Monkey 0.1.4 HTTP server Application author: Eduardo Silva EdsipeR Author e-mail:...

Monkey HTTP Server 0.1/0.4/0.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/5829/info Monkey HTTP server is prone to cross site scripting vulnerabilities. An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link. Attacker-supplied HTML and script code may be executed on a web client visiting...

Monkey HTTP Server 0.1.4 - File Disclosure

Monkey HTTP Server 0.1.4 - File Disclosure source: https://www.securityfocus.com/bid/5792/info Monkey HTTP server is prone to a directory-traversal bug that may allow attackers to access sensitive files. By passing a malicious query to a vulnerable server, an attacker can potentially gain access ...

Monkey HTTP Server 0.1.4 - File Disclosure

source: https://www.securityfocus.com/bid/5792/info Monkey HTTP server is prone to a directory-traversal bug that may allow attackers to access sensitive files. By passing a malicious query to a vulnerable server, an attacker can potentially gain access to arbitrary webserver-readable files. This...