Monkey HTTP daemon Local Privilege Escalation Vulnerability

Release date:
Updated on:

Affected Systems:
Monkey HTTP Daemon 0.9.3-1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55639
Cve id: CVE-2012-4443

Monkey HTTP Daemon is a powerful and fast Web server software with a size of about 50 kb. It supports Linux systems.

Monkey HTTP Daemon 0.9.3-1 and other versions have the Local Privilege Escalation Vulnerability. Local attackers can exploit this vulnerability to execute arbitrary code with root user privileges and completely control the affected computers.

<* Source: John Lightsey
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Monkey
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://monkeyd.sourceforge.net