CVE-2011-3579

Published: Sep 30, 2011Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

Affected (20)

Products: Icewarp: Mail Server

Icewarp

1 product

Mail Server

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Icewarp Mail Server	Up to 10.3.2
Icewarp Mail Server	Version 10.0.3
Icewarp Mail Server	Version 10.0.4
Icewarp Mail Server	Version 10.0.7
Icewarp Mail Server	Version 10.0.8
Icewarp Mail Server	Version 10.1.1
Icewarp Mail Server	Version 10.1.2
Icewarp Mail Server	Version 10.1.3
Icewarp Mail Server	Version 10.1.4
Icewarp Mail Server	Version 10.2.0
Icewarp Mail Server	Version 10.2.1
Icewarp Mail Server	Version 10.2.2
Icewarp Mail Server	Version 10.3.0
Icewarp Mail Server	Version 10.3.1
Icewarp Mail Server	Version 9.3.0
Icewarp Mail Server	Version 9.3.1
Icewarp Mail Server	Version 9.3.2
Icewarp Mail Server	Version 9.4.0
Icewarp Mail Server	Version 9.4.1
Icewarp Mail Server	Version 9.4.2