CVE-2011-3579
- State
- Published
- Severity
- Not scored
- Published
- Sep 30, 2011
- Updated
- Aug 6, 2024
- Reserved
- Sep 21, 2011
Description
server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20110923 TWSL2011-013: Multiple Vulnerabilities in IceWarp Mail Servermailing-list
- 49753vdb-entry
- https://www.trustwave.com/spiderlabs/advisories/TWSL2011-013.txt
- icewarpwebmail-xml-info-disclosure(70025)vdb-entry
- 8404third-party-advisory
- 75721vdb-entry
- 1026093vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.