Vulnerabilities > CVE-2004-1897 - Remote vulnerability in Multiple Monit Administration Interface

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
tildeslash
exploit available

Summary

Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read.

Exploit-Db

descriptionMonit <= 4.2 Remote Root Buffer Overflow Exploit. CVE-2004-1897. Remote exploit for linux platform
idEDB-ID:174
last seen2016-01-31
modified2004-04-12
published2004-04-12
reporterAbhisek Datta
sourcehttps://www.exploit-db.com/download/174/
titleMonit <= 4.2 - Remote Root Buffer Overflow Exploit