CVE-2005-1122

Published: Apr 14, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka "double expansion error").

Affected (17)

Products: Monkey Project: Monkey

Monkey Project

1 product

Monkey

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Monkey Project Monkey	Up to 0.9.0
Monkey Project Monkey	Version 0.1.1
Monkey Project Monkey	Version 0.5.2
Monkey Project Monkey	Version 0.6.0
Monkey Project Monkey	Version 0.6.1
Monkey Project Monkey	Version 0.6.2
Monkey Project Monkey	Version 0.6.3
Monkey Project Monkey	Version 0.7.0
Monkey Project Monkey	Version 0.7.1
Monkey Project Monkey	Version 0.7.2
Monkey Project Monkey	Version 0.8.0
Monkey Project Monkey	Version 0.8.1
Monkey Project Monkey	Version 0.8.2
Monkey Project Monkey	Version 0.8.3
Monkey Project Monkey	Version 0.8.4
Monkey Project Monkey	Version 0.8.4 2
Monkey Project Monkey	Version 0.8.5