CVE-2013-2182

The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
VendorProductVersion
monkey-projectmonkey
𝑥
≤ 1.4.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
monkey
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
dne
raring
dne
quantal
dne
precise
ignored
lucid
ignored
Common Weakness Enumeration
References
http://bugs.monkey-project.com/ticket/186
http://osvdb.org/94287
http://secunia.com/advisories/53638
http://www.openwall.com/lists/oss-security/2013/06/14/11
http://www.securityfocus.com/bid/60569
https://github.com/monkey/monkey/commit/15f72c1ee5e0afad20232bdf0fcecab8d62a5d89
https://github.com/monkey/monkey/issues/92
http://bugs.monkey-project.com/ticket/186
http://osvdb.org/94287
http://secunia.com/advisories/53638
http://www.openwall.com/lists/oss-security/2013/06/14/11
http://www.securityfocus.com/bid/60569
https://github.com/monkey/monkey/commit/15f72c1ee5e0afad20232bdf0fcecab8d62a5d89
https://github.com/monkey/monkey/issues/92