cbcvebase.
CVE-2005-1122
published 2005-04-14

CVE-2005-1122: Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute…

PriorityP428high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.69%
84.0th percentile
Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka "double expansion error").

Affected

16 ranges
VendorProductVersion rangeFixed in
monkey-projectmonkey<= 0.9.0—
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
monkey-projectmonkey——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.