← Database

CVE-2004-0276

MEDIUM CVSS: 5.0 Published: 2004-11-23 Modified: 2026-06-16

Description

The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.

Affected Platforms

Monkey-Project Monkey

Weakness Type

CWE-20

References