1. CVE-Search
  2. CVE-2003-1084
ID CVE-2003-1084
Summary Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length field.
References
Vulnerable Configurations
  • cpe:2.3:a:tildeslash:monit:1.4:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:1.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:1.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:2.2:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:2.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:2.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:2.3:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:2.4:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:2.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:2.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:2.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:2.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:2.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:2.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:3.2:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tildeslash:monit:4.1:*:*:*:*:*:*:*
    cpe:2.3:a:tildeslash:monit:4.1:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-07-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 9098
bugtraq 20031124 Monit 4.1 HTTP interface multiple security vulnerabilities
cert-vn VU#206382
confirm http://www.tildeslash.com/monit/dist/CHANGES.txt
gentoo GLSA-200403-14
secunia 10280
xf monit-negative-content-dos(13818)
Last major update 11-07-2017 - 01:29
Published 24-11-2003 - 05:00
Last modified 11-07-2017 - 01:29
Back to Top