Description
Monkey HTTP Server before 1.5.3, when the File Descriptor Table (FDT) is enabled and custom error messages are set, allows remote attackers to cause a denial of service (file descriptor consumption) via an HTTP request that triggers an error message.
References
- monkey-webserver-dos(95336) vdb-entry
- 69279 vdb-entry
- 60783 third-party-advisory
- http://monkey-project.com/Announcements/v1.5.3
- https://github.com/monkey/monkey/commit/b2d0e6f92310bb14a15aa2f8e96e1fb5379776dd
- [oss-security] 20140818 CVE request / advisory: Monkey web server <= v1.5.2 mailing-list
- [oss-security] 20140819 Re: CVE request / advisory: Monkey web server <= v1.5.2 mailing-list