Lucene search
MitreCVE-2013-3843HistoryJun 13, 2014 - 2:55 p.m.
CVE-2013-3843
2014-06-1314:55:12
CWE-119
mitre
web.nvd.nist.gov
104
cve-2013-3843
buffer overflow
http daemon
monkey
denial of service
remote code execution
security vulnerability
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
High
EPSS
0.345
Percentile
97.2%
Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) before 1.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP header.
Affected configurations
Node
monkey-projectmonkeyRange≤1.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| monkey-project | monkey | * | cpe:2.3:a:monkey-project:monkey:*:*:*:*:*:*:*:* |
Related
packetstorm
packetstorm
Monkey 1.2.0 Buffer Overflow
2013-06-04 00:00:00
Monkey HTTPD Header Parsing Denial of Service (Denial of Service)
2024-08-31 00:00:00
cvelist
cvelist
CVE-2013-3843
2014-06-13 14:00:00
checkpoint_advisories
checkpoint_advisories
Monkey HTTPD Header Parsing Denial of Service (CVE-2013-3843)
2013-09-01 00:00:00
prion
prion
Stack overflow
2014-06-13 14:55:00
metasploit
metasploit
Monkey HTTPD Header Parsing Denial of Service (DoS)
2013-06-13 20:56:34
securityvulns
securityvulns
CVE-2013-3843 Monkey HTTPD 1.2.0 - Buffer Overflow DoS Vulnerability With Possible Arbitrary Code Execution
2013-06-04 00:00:00
Monkey HTTPD security vulnerabilities
2013-06-04 00:00:00
ubuntucve
ubuntucve
CVE-2013-3843
2014-06-13 00:00:00
openvas
openvas
Monkey HTTP Server <= 1.2.0 Host Header Buffer Overflow Vulnerability
2013-06-05 00:00:00
Plesk < 11.0.9 Multiple Vulnerabilities
2013-06-06 00:00:00
Gentoo Security Advisory GLSA 201309-17
2015-09-29 00:00:00
nvd
nvd
CVE-2013-3843
2014-06-13 14:55:12
gentoo
gentoo
Monkey HTTP Daemon: Multiple vulnerabilities
2013-09-25 00:00:00
nessus
nessus
GLSA-201309-17 : Monkey HTTP Daemon: Multiple vulnerabilities
2013-09-26 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
High
EPSS
0.345
Percentile
97.2%
Related for CVE-2013-3843