CVE-2011-3579
MEDIUM
6.4
CVSS Severity Score
Vulnerability Description
server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.
Affected Platforms (CPE)
📦
Icewarp
Mail Server
<= 10.3.2📦
Icewarp
Mail Server
= 9.3.0📦
Icewarp
Mail Server
= 9.3.1📦
Icewarp
Mail Server
= 9.3.2📦
Icewarp
Mail Server
= 9.4.0📦
Icewarp
Mail Server
= 9.4.1📦
Icewarp
Mail Server
= 9.4.2📦
Icewarp
Mail Server
= 10.0.3📦
Icewarp
Mail Server
= 10.0.4📦
Icewarp
Mail Server
= 10.0.7📦
Icewarp
Mail Server
= 10.0.8📦
Icewarp
Mail Server
= 10.1.1📦
Icewarp
Mail Server
= 10.1.2📦
Icewarp
Mail Server
= 10.1.3📦
Icewarp
Mail Server
= 10.1.4📦
Icewarp
Mail Server
= 10.2.0📦
Icewarp
Mail Server
= 10.2.1📦
Icewarp
Mail Server
= 10.2.2📦
Icewarp
Mail Server
= 10.3.0📦
Icewarp