critical10.0Public exploit code
CVE-2003-1083
Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Monit 1.4/2.x/3/4 - 'HTTP Request' Buffer Overrun2003-11-24 · remote · linux · Verified
- Monit 4.1 - Remote Buffer Overflow2004-04-09 · remote · linux · Verified
Impact
Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tildeslash | Monit | Versions 1.4, 1.4.1, 2.0, 2.1, 2.1.1, 2.2 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/10280
- http://security.gentoo.org/glsa/glsa-200403-14.xml
- http://www.kb.cert.org/vuls/id/623854
- http://www.securityfocus.com/archive/1/345417
- http://www.securityfocus.com/bid/9099
- http://www.tildeslash.com/monit/dist/CHANGES.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13817
- http://secunia.com/advisories/10280
- http://security.gentoo.org/glsa/glsa-200403-14.xml
- http://www.kb.cert.org/vuls/id/623854
- http://www.securityfocus.com/archive/1/345417
- http://www.securityfocus.com/bid/9099
- http://www.tildeslash.com/monit/dist/CHANGES.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13817