IceWarp Webmail raw.php Information Disclosure

medium Nessus Plugin ID 63304

Language:

Synopsis

The remote web server hosts a PHP script that is affected by an information disclosure vulnerability.

Description

The version of IceWarp installed on the remote host is affected by an information disclosure vulnerability. A remote, unauthenticated attacker may be able to view PHP configuration information via the phpinfo() function by requesting the webmail/pda/controller/raw.php script.

Solution

Unknown at this time.

Plugin Details

Severity: Medium

ID: 63304

File Name: icewarp_webmail_raw_info_disclosure.nasl

Version: 1.5

Type: remote

Family: CGI abuses

Published: 12/19/2012

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:icewarp:webmail

Required KB Items: www/icewarp_webmail

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: Exploits are available

Exploited by Nessus: true

Patch Publication Date: 9/12/2012

Vulnerability Publication Date: 9/12/2012

Reference Information

BID: 55507

Detections

Analytics