PT-2011-4540 · Icewarp · Icewarp Web Mail+1

David Kirkpatrick · Published 2011-09-30 · Updated 2017-08-29 · CVE-2011-3579

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions IceWarp Mail Server versions prior to 10.3.3

Description The issue allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service due to CPU and memory consumption. This is achieved via an XML external entity declaration in conjunction with an entity reference in the server/webmail.php file of IceWarp WebMail.

Recommendations For versions prior to 10.3.3, update to version 10.3.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the server/webmail.php file until the update is applied.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-3579

Affected Products

Icewarp Mail Server

Icewarp Web Mail

References · 10

• 🔥 http://securityfocus.com/bid/49753 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2011-09/0145.html · Exploit
• 🔥 https://exploit-db.com/exploits/36165 · Exploit
• 🔥 https://trustwave.com/spiderlabs/advisories/TWSL2011-013.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-3579 · Security Note
• http://osvdb.org/75721 · Note
• http://securitytracker.com/id?1026093 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3579 · Note
• http://securityreason.com/securityalert/8404 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70025 · Note