Multiple Monit Administration Interface Remote Vulnerabilities

Solution:
Netwosix Linux has released advisory LNSA-#2004-0008 and fixes for the off-by-one error and the stack overflow in the authentication functionality. Please see the attached advisory for more information.

Gentoo has released updates to address this issue, which may be applied with the following commands:
emerge sync
emerge -pv ">=app-admin/monit-4.2.1"
emerge ">=app-admin/monit-4.2.1"

The vendor has released fixes to address these issues:


TildeSlash Monit 3.0

TildeSlash Monit 3.1

TildeSlash Monit 3.2

TildeSlash Monit 4.0

TildeSlash Monit 4.1

TildeSlash Monit 4.1.1

TildeSlash Monit 4.2

TildeSlash Monit 4.3 Beta 2


 

Privacy Statement
Copyright 2010, SecurityFocus