← back
CVE-2011-3580

CVE-2011-3580

EPSS 1.6%
IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain configuration information via a direct request to the /server URI, which triggers a call to the phpinfo function.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2011-09/0145.htmlhttp://securityreason.com/securityalert/8404http://securitytracker.com/id?1026093https://exchange.xforce.ibmcloud.com/vulnerabilities/70026https://www.trustwave.com/spiderlabs/advisories/TWSL2011-013.txthttp://www.osvdb.org/75722http://www.securityfocus.com/bid/49753