Vulnerability Description
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Proventia Desktop Endpoint Security | All versions |
| Ibm | Proventia Network Mail Security System | All versions |
| Ibm | Network Multi-Function Security | All versions |
| Ibm | Proventia Network Mail Security System Virtual Appliance | All versions |
References
- http://blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html
- http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417
- http://www.securityfocus.com/archive/1/502369/100/0/threaded
- http://www.securityfocus.com/archive/1/504987/100/0/threaded
- http://www.securityfocus.com/archive/1/504992/100/0/threaded
- http://www.securityfocus.com/archive/1/504995/100/0/threaded
- http://www.securityfocus.com/bid/34345
- http://blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html
- http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417
- http://www.securityfocus.com/archive/1/502369/100/0/threaded
- http://www.securityfocus.com/archive/1/504987/100/0/threaded
- http://www.securityfocus.com/archive/1/504992/100/0/threaded
- http://www.securityfocus.com/archive/1/504995/100/0/threaded
- http://www.securityfocus.com/bid/34345
FAQ
What is CVE-2009-1240?
CVE-2009-1240 is a vulnerability with a CVSS score of 10.0 (HIGH). Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Secur...
How severe is CVE-2009-1240?
CVE-2009-1240 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-1240?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Proventia Desktop Endpoint Security, Ibm Proventia Network Mail Security System, Ibm Network Multi-Function Security, Ibm Proventia Network Mail Security System Virtual Appliance.