CVE-2004-1897

Medium severity, CVSS 5.0. EPSS: 8.7% chance of exploitation in the next 30 days.

Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read.

Published 2004-12-31. Last modified 2026-06-16.