CVE-2013-2163

Published: Jun 13, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Monkey HTTP Daemon (monkeyd) before 1.2.2 allows remote attackers to cause a denial of service (infinite loop) via an offset equal to the file size in the Range HTTP header.

Affected (2)

Products: Monkey Project: Monkey

Monkey Project

1 product

Monkey

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Monkey Project Monkey	Up to 1.2.1
Monkey Project Monkey	Version 1.2.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://www.openwall.com/lists/oss-security/2013/06/10/8

Source: secalert@redhat.com

http://www.securityfocus.com/bid/60425

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/85125

Source: secalert@redhat.com

https://github.com/monkey/monkey/issues/90

Source: secalert@redhat.com

Exploit

http://www.openwall.com/lists/oss-security/2013/06/10/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/60425

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/85125

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/monkey/monkey/issues/90

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.