PT-2011-4540 · Icewarp · Icewarp Web Mail+1

David Kirkpatrick · Publicado 2011-09-30 · Atualizado 2017-08-29 · CVE-2011-3579

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions IceWarp Mail Server versions prior to 10.3.3

Description The issue allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service due to CPU and memory consumption. This is achieved via an XML external entity declaration in conjunction with an entity reference in the server/webmail.php file of IceWarp WebMail.

Recommendations For versions prior to 10.3.3, update to version 10.3.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the server/webmail.php file until the update is applied.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-3579

Produtos afetados

Icewarp Mail Server

Icewarp Web Mail

Referências · 10

• 🔥 http://securityfocus.com/bid/49753 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2011-09/0145.html · Exploit
• 🔥 https://exploit-db.com/exploits/36165 · Exploit
• 🔥 https://trustwave.com/spiderlabs/advisories/TWSL2011-013.txt · Exploit
• http://osvdb.org/75721 · Nota
• http://securitytracker.com/id?1026093 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-3579 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3579 · Nota
• http://securityreason.com/securityalert/8404 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70025 · Nota