20040405 Advisory: Multiple Vulnerabilities in Monitmailing list
http://marc.info/?l=bugtraq&m=108119149103696&w=2 CVE-2004-1897
Monit 4.2 - Remote Buffer Overflow
Record summary
CVE-2004-1897 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMonit 4.2 - Remote Buffer OverflowExploitDB exploitby Abhisek DattaNot analyzed1 file
References
711304Third-party advisory
http://secunia.com/advisories/11304 10051vdb entry
http://www.securityfocus.com/bid/10051 tildeslash.com
http://www.tildeslash.com/monit/changes.html tildeslash.comConfirmation
http://www.tildeslash.com/monit/secadv_20040305.txt monit-basic-auth-dos(15734)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/15734 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2004-1897