Monkey-project Monkey vulnerabilities

• monkey-project monkey A stack overflow in the mk_http_index_lookup function (mk_server/mk_http.c) of monkey commit... CVE-2025-63658 7.5 HighJanuary 29, 2026
• monkey-project monkey An out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit... CVE-2025-63657 Fix available 7.5 HighJanuary 29, 2026
• monkey-project monkey An out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c) of monkey commit... CVE-2025-63656 7.5 HighJanuary 29, 2026
• monkey-project monkey A NULL pointer dereference in the mk_http_range_parse function (mk_server/mk_http.c) of monkey... CVE-2025-63655 7.5 HighJanuary 29, 2026
• monkey-project monkey An out-of-bounds read in the mk_vhost_fdt_close function (mk_server/mk_vhost.c) of monkey commit... CVE-2025-63653 7.5 HighJanuary 29, 2026
• monkey-project monkey A use-after-free in the mk_http_request_end function (mk_server/mk_http.c) of monkey commit... CVE-2025-63652 Fix available 7.5 HighJanuary 29, 2026
• monkey-project monkey A use-after-free in the mk_string_char_search function (mk_core/mk_string.c) of monkey commit... CVE-2025-63651 7.5 HighJanuary 29, 2026
• monkey-project monkey An out-of-bounds read in the mk_ptr_to_buf in mk_core function (mk_memory.c) of monkey commit... CVE-2025-63650 7.5 HighJanuary 29, 2026
• monkey-project monkey An out-of-bounds read in the http_parser_transfer_encoding_chunked function (mk_server... CVE-2025-63649 7.5 HighJanuary 29, 2026
• monkey Monkey HTTP Daemon has local security bypass CVE-2013-2183 7.1 HighDecember 10, 2019
• monkey Monkey HTTP Daemon: broken user name authentication CVE-2013-2159 9.8 CriticalDecember 10, 2019
• monkey The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo. CVE-2013-1771 7.5 HighNovember 7, 2019
• monkey-project monkey Monkey HTTP Server before 1.5.3, when the File Descriptor Table (FDT) is enabled and custom error... CVE-2014-5336 4.3 MediumAugust 26, 2014
• monkey-project monkey Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey... CVE-2013-3843 EPSS 20.2% 6.8 MediumJune 13, 2014
• monkey-project monkey The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers... CVE-2013-2182 Public exploit 5.8 MediumJune 13, 2014
• monkey-project monkey Monkey HTTP Daemon (monkeyd) before 1.2.2 allows remote attackers to cause a denial of service ... CVE-2013-2163 5.0 MediumJune 13, 2014
• monkey-project monkey The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to... CVE-2013-3724 Public exploit EPSS 13.7% 5.0 MediumJuly 31, 2013
• monkey-project monkey Cross-site scripting (XSS) vulnerability in the Directory Listing plugin in Monkey HTTP Daemon ... CVE-2013-2181 4.3 MediumJuly 29, 2013
• monkey-project monkey Monkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink... CVE-2012-5303 6.9 MediumOctober 5, 2012
• monkey-project monkey Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during... CVE-2012-4442 4.7 MediumOctober 5, 2012
• monkey-project monkey Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI... CVE-2012-4443 6.9 MediumOctober 5, 2012
• monkey-project monkey Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service (memory... CVE-2005-1123 5.0 MediumApril 16, 2005
• monkey-project monkey Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote... CVE-2005-1122 7.5 HighApril 14, 2005
• monkey-project monkey The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote... CVE-2004-0276 Public exploit 5.0 MediumSeptember 1, 2004
• monkey-project monkey The Post_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a... CVE-2003-1209 5.0 MediumDecember 31, 2003
• monkey-project monkey Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier... CVE-2003-0218 7.5 HighApril 29, 2003
• monkey-project monkey Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read... CVE-2002-2154 Public exploit 5.0 MediumDecember 31, 2002
• monkey-project monkey Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject... CVE-2002-1852 Public exploit 4.3 MediumDecember 31, 2002
• monkey-project monkey The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers... CVE-2002-1663 Public exploit 5.0 MediumDecember 31, 2002