TI-2013-01949 CVE-2013-2183 · GHSA-mh3h-5c5w-cqh9
Monkey HTTP Daemon has local security bypass
Priority LOW 31
Monkey HTTP Daemon has local security bypass
4 records
Monkey HTTP Daemon has local security bypass
Monkey HTTP Daemon: broken user name authentication
The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.
Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory, which is referenced in the LD_PRELOAD path.