5
CVSSv2

CVE-2004-1897

Published: 31/12/2004 Updated: 11/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Administration interface in Monit 1.4 up to and including 4.2 allows remote malicious users to cause a denial of service (segmentation fault) by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read.

Vulnerable Product Search on Vulmon Subscribe to Product

Exploits

/* * THE EYE ON SECURITY RESEARCH GROUP - INDIA * * www eos-india net poc 305monitc * Remote Root Exploit for Monit <= 42 * Vulnerability: Buffer overflow in handling of Basic Authentication informations * Server authenticates clients through: * Authentication: Basic Base64Encode[UserName:Password] * Here we are exploiting the insecur ...