Monkey HTTP Daemon Mandril Security Plugin CVE-2013-2182 Security Bypass Vulnerability
BID:60569
Info
Monkey HTTP Daemon Mandril Security Plugin CVE-2013-2182 Security Bypass Vulnerability
| Bugtraq ID: | 60569 |
| Class: | Access Validation Error |
| CVE: |
CVE-2013-2182 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 14 2013 12:00AM |
| Updated: | Mar 19 2015 09:43AM |
| Credit: | felipensp |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Monkey HTTP Daemon Mandril Security Plugin CVE-2013-2182 Security Bypass Vulnerability
The Mandril Security plugin for Monkey HTTP Daemon is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions, which may aid in launching further attacks
The Mandril Security plugin for Monkey HTTP Daemon is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions, which may aid in launching further attacks
Exploit / POC
Monkey HTTP Daemon Mandril Security Plugin CVE-2013-2182 Security Bypass Vulnerability
An attacker can exploit this issue using a web browser.
The following example URI is available:
http://www.example.com/%2ftest/
An attacker can exploit this issue using a web browser.
The following example URI is available:
http://www.example.com/%2ftest/
Solution / Fix
Monkey HTTP Daemon Mandril Security Plugin CVE-2013-2182 Security Bypass Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Monkey HTTP Daemon Mandril Security Plugin CVE-2013-2182 Security Bypass Vulnerability
References:
References: