CVE Details for CVE: CVE-2003-1084
Summary
Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length field.
| Timestamps | |
|---|---|
| Last major update | 11-07-2017 - 01:29 |
| Published | 24-11-2003 - 05:00 |
| Last modified | 11-07-2017 - 01:29 |
References
- http://www.securityfocus.com/archive/1/345417
- http://www.tildeslash.com/monit/dist/CHANGES.txt
- http://security.gentoo.org/glsa/glsa-200403-14.xml
- http://www.kb.cert.org/vuls/id/206382
- http://www.securityfocus.com/bid/9098
- http://secunia.com/advisories/10280
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13818
Vulnerable Configurations
-
cpe:2.3:a:tildeslash:monit:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:1.4.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.0:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.0:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.4.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.4.2:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:1.4:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:1.4:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.3:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.3:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.4:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.4:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:4.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:4.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.1.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.4.3:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.4.3:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:3.0:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:3.0:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:3.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:3.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.2:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.2:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:2.2.1:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:3.2:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:3.2:*:*:*:*:*:*:*
-
cpe:2.3:a:tildeslash:monit:4.0:*:*:*:*:*:*:*
cpe:2.3:a:tildeslash:monit:4.0:*:*:*:*:*:*:*
CWE
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| NONE | NONE | PARTIAL |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| bid | 9098 |
| bugtraq | 20031124 Monit 4.1 HTTP interface multiple security vulnerabilities |
| cert-vn | VU#206382 |
| confirm | http://www.tildeslash.com/monit/dist/CHANGES.txt |
| gentoo | GLSA-200403-14 |
| secunia | 10280 |
| xf | monit-negative-content-dos(13818) |