Lucene search
MitreCVE-2013-3724HistoryAug 01, 2013 - 1:32 p.m.
CVE-2013-3724
2013-08-0113:32:35
CWE-20
mitre
web.nvd.nist.gov
26
mk_request_header_process
monkey 1.1.1
denial of service
cve-2013-3724
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.5
Confidence
Low
EPSS
0.735
Percentile
98.2%
The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a ‘\0’ character in an HTTP request.
Affected configurations
Node
monkey-projectmonkeyMatch1.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| monkey-project | monkey | 1.1.1 | cpe:2.3:a:monkey-project:monkey:1.1.1:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2013-3724
2013-07-31 21:00:00
packetstorm
packetstorm
Monkey HTTPD 1.1.1 Denial Of Service
2013-05-29 00:00:00
checkpoint_advisories
checkpoint_advisories
Monkey HTTPD Server Denial of Service - Ver2 (CVE-2013-3724)
2015-05-18 00:00:00
nvd
nvd
CVE-2013-3724
2013-08-01 13:32:35
ubuntucve
ubuntucve
CVE-2013-3724
2013-08-01 00:00:00
prion
prion
Cross site request forgery (csrf)
2013-08-01 13:32:00
exploitdb
exploitdb
Monkey HTTPd 1.1.1 - Crash (PoC)
2013-05-30 00:00:00
securityvulns
securityvulns
Monkey HTTPD security vulnerabilities
2013-06-04 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201309-17
2015-09-29 00:00:00
nessus
nessus
GLSA-201309-17 : Monkey HTTP Daemon: Multiple vulnerabilities
2013-09-26 00:00:00
gentoo
gentoo
Monkey HTTP Daemon: Multiple vulnerabilities
2013-09-25 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.5
Confidence
Low
EPSS
0.735
Percentile
98.2%
Related for CVE-2013-3724