CVE-2004-1897 Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Basic Authentication request without a password, which causes M...
MediumCVSS 5.0
EPSS 8.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/monit(Debian:12) | < 1:4.2.1-1 | 1:4.2.1-1 |
| debian/monit(Debian:13) | < 1:4.2.1-1 | 1:4.2.1-1 |
| debian/monit(Debian:14) | < 1:4.2.1-1 | 1:4.2.1-1 |
References
- Debian Security Tracker CVE-2004-1897 vendor-advisory
- 20040405 Advisory: Multiple Vulnerabilities in Monit mailing-list
- 11304 patch third-party-advisory
- 10051 exploit patch vdb-entry
- www.tildeslash.com
- www.tildeslash.com
- monit-basic-auth-dos(15734) vdb-entry