Monkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink attack on a PID file, as demonstrated by a pathname different from the default /var/run/monkey.pid pathname.
References
Configurations
Information
Published : 2012-10-05 14:55
Updated : 2020-03-26 07:24
NVD link : CVE-2012-5303
Mitre link : CVE-2012-5303
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
monkey-project
- monkey