29 matches found
Gentoo Security Advisory GLSA 200402-03 (monkeyd)
The remote host is missing updates announced in advisory GLSA 200402-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
monkeyd web server format string vulnerability
No description provided...
CVE-2005-1123
CVE-2005-1123 affects the Monkey HTTP Daemon (monkeyd) before version 0.9.1. The vulnerability allows a remote attacker to cause a denial-of-service via a request for a zero-byte file, resulting in memory corruption. Public sources (Gentoo GLSA 200504-14 and Nessus entries) describe a DoS and, in...
CVE-2005-1123: Improper Restriction of Operations within the Bounds of a Memory Buffer
Monkey daemon monkeyd before 0.9.1 allows remote attackers to cause a denial of service memory corruption via a request for a zero byte file...
CVE-2005-1122: Use of Externally-Controlled Format String
Format string vulnerability in cgi.c for Monkey daemon monkeyd before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers aka "double expansion error"...
GLSA-200504-14 : monkeyd: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200504-14 monkeyd: Multiple vulnerabilities Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a double expansion error in monkeyd, resulting in a format string vulnerability. Ciaran McCreesh of Gentoo Linux discover...
CVE-2004-0276: Improper Input Validation
The getrealstring function in Monkey HTTP Daemon monkeyd 0.8.1 and earlier allows remote attackers to cause a denial of service crash via an HTTP request with a sequence of "%" characters and a missing Host field...
GLSA-200402-03 : Monkeyd Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200402-03 Monkeyd Denial of Service vulnerability A bug in the URI processing of incoming requests allows for a Denial of Service to be launched against the webserver, which may cause the server to crash or behave sporadically...
CVE-2003-0218: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in PostMethod function for Monkey HTTP Daemon monkeyd 0.6.1 and earlier allows remote attackers to execute arbitrary code via a POST request with a large body...