medium5.8Public exploit code
CVE-2013-2182
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrat…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Monkey HTTP Daemon Mandril Security Plugin - Security Bypass2013-06-14 · remote · multiple · Verified
Impact
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monkey-Project | Monkey | through 1.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.monkey-project.com/ticket/186
- http://osvdb.org/94287
- http://secunia.com/advisories/53638
- http://www.openwall.com/lists/oss-security/2013/06/14/11
- http://www.securityfocus.com/bid/60569
- https://github.com/monkey/monkey/commit/15f72c1ee5e0afad20232bdf0fcecab8d62a5d89
- https://github.com/monkey/monkey/issues/92
- http://bugs.monkey-project.com/ticket/186
- http://osvdb.org/94287
- http://secunia.com/advisories/53638
- http://www.openwall.com/lists/oss-security/2013/06/14/11
- http://www.securityfocus.com/bid/60569
- https://github.com/monkey/monkey/commit/15f72c1ee5e0afad20232bdf0fcecab8d62a5d89
- https://github.com/monkey/monkey/issues/92