PT-2013-4581 · Monkey · Monkeyd

Publicado 2013-07-31 · Atualizado 2020-03-26 · CVE-2013-3724

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Monkey version 1.1.1

Description The issue allows remote attackers to cause a denial of service, resulting in a thread crash and service outage. This is achieved by including a '0' character in an HTTP request, which is processed by the mk request header process function in mk request.c.

Recommendations For Monkey version 1.1.1, consider restricting or validating HTTP requests to prevent the inclusion of '0' characters as a temporary workaround until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-3724

Produtos afetados

Monkeyd

Referências · 3

• 🔥 https://exploit-db.com/exploits/25837 · Exploit
• 🔥 http://bugs.monkey-project.com/ticket/181 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3724 · Nota de Segurança