Detections
Analytics
GLSA-200402-03 : Monkeyd Denial of Service vulnerability
medium Nessus Plugin ID 14447
Synopsis
The remote Gentoo host is missing one or more security-related patches.Description
The remote host is affected by the vulnerability described in GLSA-200402-03 (Monkeyd Denial of Service vulnerability)A bug in the URI processing of incoming requests allows for a Denial of Service to be launched against the webserver, which may cause the server to crash or behave sporadically.
Impact :
Although there are no public exploits known for bug, users are recommended to upgrade to ensure the security of their infrastructure.
Workaround :
There is no immediate workaround; a software upgrade is required. The vulnerable function in the code has been rewritten.
Solution
All users are recommended to upgrade monkeyd to 0.8.2:# emerge sync # emerge -pv '>=www-servers/monkeyd-0.8.2' # emerge '>=www-servers/monkeyd-0.8.2'
See Also
Plugin Details
Severity: Medium
ID: 14447
File Name: gentoo_GLSA-200402-03.nasl
Version: 1.13
Type: local
Family: Gentoo Local Security Checks
Published: 8/30/2004
Updated: 1/6/2021
Supported Sensors: Nessus
Vulnerability Information
CPE: p-cpe:/a:gentoo:linux:monkeyd, cpe:/o:gentoo:linux
Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list
Patch Publication Date: 2/11/2004
Reference Information
GLSA: 200402-03