PT-2002-2387 · Monkey · Monkey Http Daemon

Publicado 2002-12-31 · Atualizado 2020-03-26 · CVE-2002-1663

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Monkey HTTP Daemon versions prior to 0.5.1

Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved by sending a POST request with an invalid or missing Content-Length header value, exploiting the Post Method function in method.c.

Recommendations For versions prior to 0.5.1, update to version 0.5.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Post Method function until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2002-1663

Produtos afetados

Monkey Http Daemon

Referências · 8

• 🔥 http://securityfocus.com/bid/6096 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-11/0023.html · Exploit
• 🔥 https://exploit-db.com/exploits/21981 · Exploit
• 🔥 http://securitytracker.com/id?1005507 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10529 · Nota
• http://secunia.com/advisories/7449 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2002-1663 · Nota de Segurança
• http://monkeyd.sourceforge.net/Changelog.txt · Nota