CVE-2012-4443

Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to gain privileges by leveraging cgi-bin write access.

Score

CVSS 2.0 6.9 Medium

Status

Modified - secalert@redhat.com

Published

2012-10-05

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Monkey (Monkey-project)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688008
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688879
• http://www.openwall.com/lists/oss-security/2012/09/21/10