CVE-2013-2159

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

Monkey HTTP Daemon: broken user name authentication

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
monkey	monkey	< 1.2.2

References

http://www.openwall.com/lists/oss-security/2013/06/07/4Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/60415Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/85138Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2013-2159Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/06/07/4Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/60415Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/85138Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2013-2159Third Party Advisory

Timeline

Published: Dec 10, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-21605.0The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a de CVE-2013-21617.5XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofe CVE-2013-21621.9Race condition in the post-installation script (mysql-server-5.5.postinst) for MySQL Server 5.5 for Debian GNU/Linux and Ubuntu Linux create CVE-2013-21635.0Monkey HTTP Daemon (monkeyd) before 1.2.2 allows remote attackers to cause a denial of service (infinite loop) via an offset equal to the fi CVE-2013-21642.1The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to obtain sensitive info CVE-2013-21657.5ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web CVE-2013-21669.8python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass CVE-2013-21679.8python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass CVE-2013-21681.9The _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1 CVE-2013-21716.9The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not proper CVE-2013-21724.3jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 CVE-2013-21734.3wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service