CVE-2004-0276: Monkey-Project Monkey

Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days.

The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.

Affected products

• Monkey-Project Monkey: up to and including 0.8.1; version 0.1.1 only; version 0.5.2 only; version 0.6.0 only; version 0.6.1 only; version 0.6.2 only; …

Published 2004-11-23. Last modified 2026-06-16.