CVE-2005-1122
Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka "double expansion error").
| Software | From | Fixed in |
|---|---|---|
| monkey-project / monkey | 0.1.1 | 0.1.1.x |
| monkey-project / monkey | 0.5.2 | 0.5.2.x |
| monkey-project / monkey | 0.6.0 | 0.6.0.x |
| monkey-project / monkey | 0.6.1 | 0.6.1.x |
| monkey-project / monkey | 0.6.2 | 0.6.2.x |
| monkey-project / monkey | 0.6.3 | 0.6.3.x |
| monkey-project / monkey | 0.7.0 | 0.7.0.x |
| monkey-project / monkey | 0.7.1 | 0.7.1.x |
| monkey-project / monkey | 0.7.2 | 0.7.2.x |
| monkey-project / monkey | 0.8.0 | 0.8.0.x |
| monkey-project / monkey | 0.8.1 | 0.8.1.x |
| monkey-project / monkey | 0.8.2 | 0.8.2.x |
| monkey-project / monkey | 0.8.3 | 0.8.3.x |
| monkey-project / monkey | 0.8.4 | 0.8.4.x |
| monkey-project / monkey | 0.8.4-2 | 0.8.4-2.x |
| monkey-project / monkey | 0.8.5 | 0.8.5.x |
| monkey-project / monkey | - | 0.9.0.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime