Input Validation and Logic

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character…CVE-2013-3724Monkey-Project · 14% likely

   CWE-20

2. The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service (crash) via a POST request with an invalid or missing…CVE-2002-1663Monkey-Project · 4.0% likely

   CWE-20

3. The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of…CVE-2004-0276Monkey-Project · 3.7% likely

   CWE-20

4. Monkey HTTP Daemon (monkeyd) before 1.2.2 allows remote attackers to cause a denial of service (infinite loop) via an offset equal to the file size in the Range HTTP header.CVE-2013-2163Monkey-Project · 2.5% likely

   CWE-20

5. Monkey HTTP Server before 1.5.3, when the File Descriptor Table (FDT) is enabled and custom error messages are set, allows remote attackers to cause a denial of service (file desc…CVE-2014-5336Monkey-Project · 2.5% likely

   CWE-20

6. The Post_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service (crash) via a POST request without a Content-Type header.CVE-2003-1209Monkey-Project · 2.4% likely

   CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.