OpenBSD VuXML: Documenting security issues in the OpenBSD Ports & Packages Collection

monit -- multiple vulnerabilities

Affected packages
		monit	<	4.2.1

Details

VuXML ID	5b0a3876-8d8e-11d8-9680-00304f19272c
Discovery	2004-04-05
Entry	2004-04-13

Three vulnerabilities were found in Monit during a simple code review. All of the vulnerabilities are in Monit's HTTP/HTTPS administration interfaces, and as such can only be exploited if the interface is enabled and accessible. Two of the vulnerabilities lie in the Basic authentication code, while one vulnerability lies in the processing of POST requests.

References

URL	http://marc.theaimsgroup.com/?l=bugtraq&m=108119149103696&w=2
URL	http://www.tildeslash.com/monit/secadv_20040305.txt