| Package | Affected versions | Patched versions |
|---|---|---|
| monkey | = 0.1.1= 0.5.2= 0.6.0= 0.6.1= 0.6.2= 0.6.3= 0.7.0= 0.7.1= 0.7.2= 0.8.0≤ 0.8.1 |
The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free