Ipswitch IMail 5.0.8/6.0/6.1 - IMonitor 'status.cgi' Denial of Service

                							

                source: http://www.securityfocus.com/bid/914/info

IMail includes a service called IMail Monitor which is used for local and remote performance measuring and diagnostics. It includes a small webserver operating on port 8181 to support web-based monitoring. One of the cgi scripts, status.cgi, is used to determine which services are currently running and create a web pafge to report this information. Multiple simultaneous requests for status.cgi will cause the software to crash, with a Dr. Watson error of "Invalid Memory Address".

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/19711-1.exe

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/19711-2.zip