CVE-2004-1897
EPSS 7.4%
Description
Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read.
How to fix CVE-2004-1897
To remediate CVE-2004-1897, upgrade the affected package to a fixed version below.
- Debian/monit—upgrade to 1:4.2.1-1 or later
Is CVE-2004-1897 being exploited?
Moderate — EPSS is 7.4%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 1:4.2.1-1