10280Third-party advisory
http://secunia.com/advisories/10280 CVE-2003-1083
Monit 4.1 - Remote Buffer Overflow
Record summary
CVE-2003-1083 has a selected CVSS score of 10.0; EIP currently links 2 catalogued exploits.
Description
Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBMonit 4.1 - Remote Buffer OverflowExploitDB exploitby gsichtNot analyzed1 file
ExploitDBMonit 1.4/2.x/3/4 - 'HTTP Request' Buffer OverrunExploitDB exploitby ShadowintegerNot analyzed1 file
References
8GLSA-200403-14Vendor advisory
http://security.gentoo.org/glsa/glsa-200403-14.xml VU#623854Third-party advisory
http://www.kb.cert.org/vuls/id/623854 20031124 Monit 4.1 HTTP interface multiple security vulnerabilitiesmailing list
http://www.securityfocus.com/archive/1/345417 9099vdb entry
http://www.securityfocus.com/bid/9099 tildeslash.comConfirmation
http://www.tildeslash.com/monit/dist/CHANGES.txt monit-http-bo(13817)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/13817 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1083