Monit versions 4.2 and below have two basic authentication flaws that allow for a remote denial of service and a buffer overflow that can lead to arbitrary code execution. An off-by-one vulnerability also exists with POST requests.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33011/monit.txt
Source: https://packetstormsecurity.com/files/33011/monit.txt.html