Description
The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character in an HTTP request.
Exploits (1)
References (1)
Core 1
Core References
Exploit, Patch x_refsource_confirm
http://bugs.monkey-project.com/ticket/181
Scores
EPSS
0.0887
EPSS Percentile
92.6%
Details
CWE
CWE-20
Status
published
Products (1)
monkey-project/monkey
1.1.1
Published
Aug 01, 2013
Tracked Since
Feb 18, 2026