Description
server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- IceWarp Mail Server 10.3.2 server/webmail.php Soap Message Parsing - Arbitrary File Disclosure EDB-36165 · webapps · Sep 24, 2011 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20110923 TWSL2011-013: Multiple Vulnerabilities in IceWarp Mail Server mailing-list
- 49753 vdb-entry
- https://www.trustwave.com/spiderlabs/advisories/TWSL2011-013.txt
- icewarpwebmail-xml-info-disclosure(70025) vdb-entry
- 8404 third-party-advisory
- 75721 vdb-entry
- 1026093 vdb-entry