CVE-2003-1084

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length field.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/10280Patch, Vendor Advisory
http://security.gentoo.org/glsa/glsa-200403-14.xmlVendor Advisory
http://www.kb.cert.org/vuls/id/206382Third Party Advisory, US Government Resource
http://www.securityfocus.com/archive/1/345417Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/9098Patch, Vendor Advisory
http://www.tildeslash.com/monit/dist/CHANGES.txtVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13818
http://secunia.com/advisories/10280Patch, Vendor Advisory
http://security.gentoo.org/glsa/glsa-200403-14.xmlVendor Advisory
http://www.kb.cert.org/vuls/id/206382Third Party Advisory, US Government Resource
http://www.securityfocus.com/archive/1/345417Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/9098Patch, Vendor Advisory
http://www.tildeslash.com/monit/dist/CHANGES.txtVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13818

Timeline

Published: Nov 24, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-10855.0The HTTP server in the Thomson TWC305, TWC315, and TCW690 cable modem ST42.03.0a allows remote attackers to cause a denial of service (unsta CVE-2003-10867.5PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute CVE-2003-10875.0Unknown vulnerability in diagmond and possibly other applications in HP9000 Series 700/800 running HP-UX B.11.00, B.11.04, B.11.11, and B.11 CVE-2003-10884.3Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML v CVE-2003-10895.0index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the pa CVE-2003-109010.0Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.CVE-2003-10917.5Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (c CVE-2003-10927.5Unknown vulnerability in the "Automatic File Content Type Recognition (AFCTR) Tool version of the file package before 3.41, related to "a me CVE-2003-10934.6BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password wh CVE-2003-10947.2BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect current user, such as in CVE-2003-10954.6BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication CVE-2003-109610.0The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it