IceWarp Web Mail Multiple Information Disclosure Vulnerabilities
BID:49753
Info
IceWarp Web Mail Multiple Information Disclosure Vulnerabilities
| Bugtraq ID: | 49753 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-3579 CVE-2011-3580 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 23 2011 12:00AM |
| Updated: | Sep 23 2011 12:00AM |
| Credit: | David Kirkpatrick |
| Vulnerable: |
IceWarp Web Mail 10.3.2 |
| Not Vulnerable: |
IceWarp Web Mail 10.3.3 |
Discussion
IceWarp Web Mail Multiple Information Disclosure Vulnerabilities
IceWarp Web Mail is prone to multiple information-disclosure vulnerabilities.
Attackers can exploit these issues to gain access to potentially sensitive information, and possibly cause denial-of-service conditions; other attacks may also be possible.
IceWarp Web Mail is prone to multiple information-disclosure vulnerabilities.
Attackers can exploit these issues to gain access to potentially sensitive information, and possibly cause denial-of-service conditions; other attacks may also be possible.
Exploit / POC
IceWarp Web Mail Multiple Information Disclosure Vulnerabilities
An attacker can exploit these issues by using readily available utilities.
The following proof of concept is available:
An attacker can exploit these issues by using readily available utilities.
The following proof of concept is available:
Solution / Fix
IceWarp Web Mail Multiple Information Disclosure Vulnerabilities
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
IceWarp Web Mail Multiple Information Disclosure Vulnerabilities
References:
References:
- IceWarp Web Mail Home Page (IceWarp)
- Trustwave's SpiderLabs Security Advisory TWSL2011-013: Multiple Vulnerabilities (David Kirkpatrick)