Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Edsiper

#39966of 53,622
6.8Total CVSS
Vulnerabilities · 1
PT-2014-2712
6.8
2014-06-13
Monkey · Monkey Http Daemon · CVE-2013-3843
**Name of the Vulnerable Software and Affected Versions** Monkey HTTP Daemon versions prior to 1.2.1 **Description** The issue is a stack-based buffer overflow in the `mk request header process` function, located in `mk request.c`. This allows remote attackers to potentially cause a denial of service, resulting in a crash, and possibly execute arbitrary code via a crafted HTTP header. **Recommendations** For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `mk request header process` function until a patch is available.