{"id":6281,"date":"2017-01-23T14:08:18","date_gmt":"2017-01-23T22:08:18","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/01\/23\/news-132\/"},"modified":"2017-01-23T14:08:18","modified_gmt":"2017-01-23T22:08:18","slug":"news-132","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/01\/23\/news-132\/","title":{"rendered":"SSD Advisory – Icewarp, AfterLogic and MailEnable Code Injection"},"content":{"rendered":"

<\/p>\n

\n

Vulnerabilities Summary<\/strong>
The following advisory describes three (3) vulnerabilities in Icewarp, AfterLogic and MailEnable Webmails.<\/p>\n

The three vulnerabilities found are:<\/p>\n

    \n
  1. Afterlogic Webmail code injection<\/li>\n
  2. Icewarp Webmail code injection<\/li>\n
  3. MailEnable Webmail code injection<\/li>\n<\/ol>\n

    Credit<\/strong>
    An independent security researcher has reported this vulnerability to Beyond Security\u2019s SecuriTeam Secure Disclosure program.<\/p>\n

    Vendor Responses<\/strong>
    AfterLogic<\/strong>
    AfterLogic has released patch to address the vulnerability – we have no information on which version addresses this, we believe the latest version of AfterLogic includes patches for the vulnerability. <\/p>\n

    IceWarp<\/strong>
    IceWarp has released patch to address the vulnerability – version 11.4.0.<\/p>\n

    MailEnable<\/strong>
    We notified MailEnable of the vulnerabilities back in November 2015, repeated attempts to re-establish contact and get some answer on the status of the patches for these vulnerabilities went unanswered. At this time there is no solution or workaround for these vulnerabilities.<\/p>\n

    <\/span><\/p>\n

    Vulnerability Details<\/strong><\/u>
    Afterlogic Webmail code injection<\/u>
    The vulnerability occurs in login.aspx<\/em> file. Afterlogic Webmail do not sanitize user input parameter LanguageID<\/em>, allowing for code injection.<\/p>\n<\/p>\n

    \t\t<\/p>\n

    \n
    <\/span> \t\t\t<\/p>\n
    \n
    \n
    <\/div>\n<\/div>\n
    \n
    <\/div>\n<\/div>\n
    \n
    <\/div>\n<\/div>\n
    \n
    <\/div>\n<\/div>\n
    \n
    <\/div>\n<\/div>\n
    \n
    <\/div>\n<\/div>\n<\/div>\n<\/div>\n
    <\/div>\n