CVE-2004-0276

The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

3.73% chance of exploitation in the next 30 days, 89th percentile

Published

2004-09-01

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://aluigi.altervista.org/poc/monkeydos.zip

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23686

References

• CVE Record
• NVD entry

Related

• CVE-2004-0275
• CVE-2004-0277
• CVE-2004-0271
• CVE-2004-0281
• CVE-2004-0270
• CVE-2004-0282