Vulnerability in Monkey-Project Monkey

CVE-2005-1122

Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka "double expansion error").

EPSS: 0.027 (84.3th percentile) — read the EPSS interpretation.

Affected products

Monkey-project Monkey — versions 0.1.1, 0.5.2, 0.6.0
N/a — versions n/a

Weakness classification (CWE)

CWE-134 — Use of Externally-Controlled Format String

References

cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_OSVDB, vdb-entry, Vendor Advisory)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)