CVE-2010-5334: Path Traversal
IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (c to basic/index.html) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2010-5334?
CVE-2010-5334 is a directory traversal vulnerability in IceWarp Webclient before version 10.2.1.
How does CVE-2010-5334 impact IceWarp Mailserver?
CVE-2010-5334 can result in the loss of confidential data of IceWarp Mailserver and the operating system.
How can CVE-2010-5334 be exploited?
CVE-2010-5334 can be exploited by passing input via a certain parameter, allowing an attacker to browse the system directories.
What is the severity level of CVE-2010-5334?
CVE-2010-5334 has a severity level of 7.5 (high).
How can I fix CVE-2010-5334?
To fix CVE-2010-5334, update IceWarp Webclient to version 10.2.1 or later.