CVE-2003-1084: Medium severity Tildeslash Monit vulnerability
Published Nov 24, 2003
·Updated
Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length field.
Affected Software
17 affected components
Tildeslash Monit=1.4
Tildeslash Monit=2.3
Tildeslash Monit=2.2.1
Tildeslash Monit=2.2
Tildeslash Monit=3.2
Tildeslash Monit=1.4.1
Tildeslash Monit=3.0
Tildeslash Monit=2.4.2
Tildeslash Monit=2.1
Tildeslash Monit=2.0
Tildeslash Monit=2.4.1
Tildeslash Monit=2.4
Tildeslash Monit=4.1
Tildeslash Monit=2.1.1
Tildeslash Monit=2.4.3
Tildeslash Monit=3.1
Tildeslash Monit=4.0
Remediation
Patch Available
Patch Available
Patch Available
Event History
Nov 24, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Feb 13, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1084?
CVE-2003-1084 is classified as a denial of service vulnerability that may cause the Monit daemon to crash.
2
How do I fix CVE-2003-1084?
To fix CVE-2003-1084, upgrade to a patched version of Monit that is not affected by this vulnerability.
3
Which versions of Monit are affected by CVE-2003-1084?
CVE-2003-1084 affects Monit versions 1.4 through 4.1.
4
What type of attack does CVE-2003-1084 allow?
CVE-2003-1084 allows remote attackers to launch a denial of service attack by sending an HTTP POST request with a negative Content-Length header.
5
Is there a workaround for CVE-2003-1084?
As a workaround for CVE-2003-1084, you can limit access to the Monit server or monitor logs for unusual HTTP requests.