Ipswitch IMail 5.0.8/6.0/6.1 - IMonitor 'status.cgi' Denial of Service

EDB-ID:

19711

Author:

Ussr Labs

Type:

dos

Platform:

Windows

Published:

2000-01-05

source: http://www.securityfocus.com/bid/914/info

IMail includes a service called IMail Monitor which is used for local and remote performance measuring and diagnostics. It includes a small webserver operating on port 8181 to support web-based monitoring. One of the cgi scripts, status.cgi, is used to determine which services are currently running and create a web pafge to report this information. Multiple simultaneous requests for status.cgi will cause the software to crash, with a Dr. Watson error of "Invalid Memory Address".

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/19711-1.exe

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/19711-2.zip