CVE-2013-3843
Monkey HTTP Daemon < 1.2.1 - Stack-Based Buffer Overflow via Crafted HTTP Header
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-3843.
Includes Metasploit module auxiliary/dos/http/monkey_headers.
AI-analyzed exploit summary This Metasploit module exploits a denial-of-service vulnerability in Monkey HTTPD by sending a malformed HTTP request with improperly formatted headers, causing a segmentation fault. The exploit targets versions <= 1.2.0 and verifies the server's status post-exploitation.
Description
Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) before 1.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP header.
Exploits (1)
This Metasploit module exploits a denial-of-service vulnerability in Monkey HTTPD by sending a malformed HTTP request with improperly formatted headers, causing a segmentation fault. The exploit targets versions <= 1.2.0 and verifies the server's status post-exploitation.