CVE-2002-2154

CVE-2002-2154 describes a directory traversal vulnerability in the web server component Monkey HTTP Daemon 0.1.4. Remote attackers can read arbitrary files by using dot-dot sequences in the request path. The problem is documented across multiple feeds (NVD, Red Hat advisories, CVE listings) with ...

CVE-2002-1663

Monkey HTTP Server (monkeyd) is affected by CVE-2002-1663 through the Post_Method function in method.c, where a crafted POST request with an invalid or missing Content-Length header can crash the server and cause a denial of service. The vulnerability is reported for versions prior to 0.5.1. The ...

CVE-2013-2163

CVE-2013-2163 affects Monkey HTTP Daemon (monkeyd) prior to version 1.2.2. The issue allows a remote attacker to cause a denial of service (infinite loop) by sending a crafted Range header with an offset equal to the file size. Public docs consistently describe the vector as a Range-header-based ...

CVE-2013-3724

CVE-2013-3724 affects Monkey HTTP Daemon 1.1.1, where mk_request_header_process in mk_request.c can be triggered by a null byte ('\0') in an HTTP request to cause a denial of service (thread crash and service outage). This vulnerability is documented across multiple sources (NVD, Red Hat, Gentoo ...

CVE-2005-1123

CVE-2005-1123 affects the Monkey HTTP Daemon (monkeyd) before version 0.9.1. The vulnerability allows a remote attacker to cause a denial-of-service via a request for a zero-byte file, resulting in memory corruption. Public sources (Gentoo GLSA 200504-14 and Nessus entries) describe a DoS and, in...

CVE-2004-0276

The CVE-2004-0276 entry concerns Monkey HTTP Daemon (monkeyd) versions up to and including 0.8.1. The vulnerability is in the get_real_string function, where processing an HTTP request containing a sequence of "%" characters and a missing Host header can cause the daemon to crash, resulting in a ...

CVE-2003-1209

The vulnerability CVE-2003-1209 affects Monkey HTTP Daemon prior to 0.6.2. A POST request without a Content-Type header can cause the server to crash, resulting in a denial of service. The description and connected records confirm the affected product (Monkey HTTP Daemon) and the root cause (like...

CVE-2013-2182

The CVE-2013-2182 entry concerns the Mandril security plugin in Monkey HTTP Daemon (monkeyd) prior to 1.5.0. The root cause is a bypass of access restrictions via a crafted URI, demonstrated by an encoded forward slash, enabling remote attackers to access restricted paths. Public references corro...