PT-2013-4581 · Monkey · Monkeyd

Published 2013-07-31 · Updated 2020-03-26 · CVE-2013-3724

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Monkey version 1.1.1

Description The issue allows remote attackers to cause a denial of service, resulting in a thread crash and service outage. This is achieved by including a '0' character in an HTTP request, which is processed by the mk request header process function in mk request.c.

Recommendations For Monkey version 1.1.1, consider restricting or validating HTTP requests to prevent the inclusion of '0' characters as a temporary workaround until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-3724

Affected Products

Monkeyd

References · 3

• 🔥 https://exploit-db.com/exploits/25837 · Exploit
• 🔥 http://bugs.monkey-project.com/ticket/181 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3724 · Security Note