← back
CVE-2013-2182

CVE-2013-2182

EPSS 5.6%
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/38587unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://bugs.monkey-project.com/ticket/186http://osvdb.org/94287http://secunia.com/advisories/53638https://github.com/monkey/monkey/commit/15f72c1ee5e0afad20232bdf0fcecab8d62a5d89https://github.com/monkey/monkey/issues/92http://www.openwall.com/lists/oss-security/2013/06/14/11http://www.securityfocus.com/bid/60569