PT-2002-2387 · Monkey · Monkey Http Daemon

Published 2002-12-31 · Updated 2020-03-26 · CVE-2002-1663

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Monkey HTTP Daemon versions prior to 0.5.1

Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved by sending a POST request with an invalid or missing Content-Length header value, exploiting the Post Method function in method.c.

Recommendations For versions prior to 0.5.1, update to version 0.5.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Post Method function until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2002-1663

Affected Products

Monkey Http Daemon

References · 8

• 🔥 http://securityfocus.com/bid/6096 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-11/0023.html · Exploit
• 🔥 https://exploit-db.com/exploits/21981 · Exploit
• 🔥 http://securitytracker.com/id?1005507 · Exploit
• http://secunia.com/advisories/7449 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-1663 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10529 · Note
• http://monkeyd.sourceforge.net/Changelog.txt · Note