EUVD-2013-1796

Malware in sbrugna...

CVE-2013-1771

The web server Monkeyd produces a world-readable log /var/log/monkeyd/master.log on gentoo...

Code injection

The web server Monkeyd produces a world-readable log /var/log/monkeyd/master.log on gentoo...

CVE-2013-1771

The web server Monkeyd produces a world-readable log /var/log/monkeyd/master.log on gentoo...

CVE-2013-1771

CVE-2013-1771 affects the Monkeyd web server, where the master.log (/var/log/monkeyd/master.log) is world-readable on Gentoo due to permissions. This could expose log contents (e.g., requests) as described in the provided sources. No concrete exploit details or patch/version remediation are prese...

CVE-2013-1771

The web server Monkeyd produces a world-readable log /var/log/monkeyd/master.log on gentoo...

PT-2019-6852

Name of the Vulnerable Software and Affected Versions Monkeyd affected versions not specified Description The issue concerns the web server Monkeyd, which produces a world-readable log file located at /var/log/monkeyd/master.log on Gentoo systems. Recommendations At the moment, there is no...

CVE-2013-1771: Insertion of Sensitive Information into Log File

The web server Monkeyd produces a world-readable log /var/log/monkeyd/master.log on gentoo...

CVE-2013-3843

Stack-based buffer overflow in the mkrequestheaderprocess function in mkrequest.c in Monkey HTTP Daemon monkeyd before 1.2.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTTP header...

CVE-2013-2182

The CVE-2013-2182 entry concerns the Mandril security plugin in Monkey HTTP Daemon (monkeyd) prior to 1.5.0. The root cause is a bypass of access restrictions via a crafted URI, demonstrated by an encoded forward slash, enabling remote attackers to access restricted paths. Public references corro...

CVE-2013-2163

Monkey HTTP Daemon monkeyd before 1.2.2 allows remote attackers to cause a denial of service infinite loop via an offset equal to the file size in the Range HTTP header...

CVE-2013-2182: Undefined Security Weakness

The Mandril security plugin in Monkey HTTP Daemon monkeyd before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash...

PT-2014-2564

Name of the Vulnerable Software and Affected Versions Monkey HTTP Daemon monkeyd versions prior to 1.2.2 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by sending a specific Range HTTP header with an offset equal to...

CVE-2013-2163: Improper Input Validation

Monkey HTTP Daemon monkeyd before 1.2.2 allows remote attackers to cause a denial of service infinite loop via an offset equal to the file size in the Range HTTP header...

CVE-2013-3843: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the mkrequestheaderprocess function in mkrequest.c in Monkey HTTP Daemon monkeyd before 1.2.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTTP header...

CVE-2013-2181

Affected software : Monkey HTTP Daemon (monkeyd) 1.2.2 with the Directory Listing plugin. Vulnerability : Cross-site scripting (XSS) via a file name (CVE-2013-2181). Root cause : Directory Listing plugin mishandles file names, enabling script/HTML injection. Impact : potential execution of arbitr...

CVE-2013-2181: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Directory Listing plugin in Monkey HTTP Daemon monkeyd 1.2.2 allows attackers to inject arbitrary web script or HTML via a file name...

Gentoo Security Advisory GLSA 200402-03 (monkeyd)

The remote host is missing updates announced in advisory GLSA 200402-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200504-14 (monkeyd)

The remote host is missing updates announced in advisory GLSA 200504-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200504-14 (monkeyd)

The remote host is missing updates announced in advisory GLSA 200504-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...