CVE Details for CVE: CVE-2003-1083
Summary
Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
| Timestamps | |
|---|---|
| Last major update | 11-07-2017 - 01:29 |
| Published | 31-12-2003 - 05:00 |
| Last modified | 11-07-2017 - 01:29 |
References
- http://www.securityfocus.com/archive/1/345417
- http://www.tildeslash.com/monit/dist/CHANGES.txt
- http://security.gentoo.org/glsa/glsa-200403-14.xml
- http://www.kb.cert.org/vuls/id/623854
- http://www.securityfocus.com/bid/9099
- http://secunia.com/advisories/10280
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13817
Vulnerable Configurations
-
cpe:2.3:a:tildeslash:monit:2.0:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.0:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.4.3:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.4.3:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:3.0:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:3.0:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:1.4:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:1.4:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:1.4.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.4.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.4.2:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.1.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.2:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.2:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:3.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:3.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:3.2:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:3.2:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.2.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.3:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.3:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.4:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.4:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:4.0:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:4.0:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:4.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:4.1:*:*:*:*:*:*:*
CWE
CVSS
Base
10.0
Impact
10.0
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| COMPLETE | COMPLETE | COMPLETE |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| bid | 9099 |
| bugtraq | 20031124 Monit 4.1 HTTP interface multiple security vulnerabilities |
| cert-vn | VU#623854 |
| confirm | http://www.tildeslash.com/monit/dist/CHANGES.txt |
| gentoo | GLSA-200403-14 |
| secunia | 10280 |
| xf | monit-http-bo(13817) |