Lucene search

[email protected]CVE-2011-3579

HistorySep 30, 2011 - 5:55 p.m.

CVE-2011-3579

2011-09-3017:55:00

CWE-399

[email protected]

web.nvd.nist.gov

icewarp

webmail

mail server

cve-2011-3579

security vulnerability

xml external entity

denial of service

7.1 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.025 Low

EPSS

Percentile

89.9%

JSON

server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

CPENameOperatorVersion
icewarp:mail_servericewarp mail servereq10.2.0
icewarp:mail_servericewarp mail servereq10.1.1
icewarp:mail_servericewarp mail servereq9.4.0
icewarp:mail_servericewarp mail servereq10.2.1
icewarp:mail_servericewarp mail servereq10.0.4
icewarp:mail_servericewarp mail servereq10.0.7
icewarp:mail_servericewarp mail servereq9.4.2
icewarp:mail_servericewarp mail servereq9.3.1
icewarp:mail_servericewarp mail servereq10.3.0
icewarp:mail_servericewarp mail servereq9.3.2

CPE	Name	Operator	Version
icewarp:mail_server	icewarp mail server	eq	10.2.0
icewarp:mail_server	icewarp mail server	eq	10.1.1
icewarp:mail_server	icewarp mail server	eq	9.4.0
icewarp:mail_server	icewarp mail server	eq	10.2.1
icewarp:mail_server	icewarp mail server	eq	10.0.4
icewarp:mail_server	icewarp mail server	eq	10.0.7
icewarp:mail_server	icewarp mail server	eq	9.4.2
icewarp:mail_server	icewarp mail server	eq	9.3.1
icewarp:mail_server	icewarp mail server	eq	10.3.0
icewarp:mail_server	icewarp mail server	eq	9.3.2

Rows per page:

1-10 of 201

References

archives.neohapsis.com/archives/bugtraq/2011-09/0145.html

securityreason.com/securityalert/8404

securitytracker.com/id?1026093

www.osvdb.org/75721

www.securityfocus.com/bid/49753

exchange.xforce.ibmcloud.com/vulnerabilities/70025

www.trustwave.com/spiderlabs/advisories/TWSL2011-013.txt

7.1 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.025 Low

EPSS

Percentile

89.9%

JSON

Related for CVE-2011-3579

prion1 securityvulns2 openvas3 packetstorm1