Lucene search

[email protected]CVE-2009-1240

HistoryApr 03, 2009 - 6:30 p.m.

CVE-2009-1240

2009-04-0318:30:00

[email protected]

web.nvd.nist.gov

ibm

proventia

vulnerability

malware bypass

nvd

cve-2009-1240

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.6%

JSON

Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.

Affected configurations

NVD

Node

ibmproventia_desktop_endpoint_security

ibmproventia_network_mail_security_system

ibmnetwork_multi-function_security

ibmproventia_network_mail_security_system_virtual_appliance

CPENameOperatorVersion
ibm:proventia_desktop_endpoint_securityibm proventia desktop endpoint securityeq*
ibm:proventia_network_mail_security_systemibm proventia network mail security systemeq*
ibm:network_multi-function_securityibm network multi-function securityeq*
ibm:proventia_network_mail_security_system_virtual_applianceibm proventia network mail security system virtual applianceeq*

CPE	Name	Operator	Version
ibm:proventia_desktop_endpoint_security	ibm proventia desktop endpoint security	eq	*
ibm:proventia_network_mail_security_system	ibm proventia network mail security system	eq	*
ibm:network_multi-function_security	ibm network multi-function security	eq	*
ibm:proventia_network_mail_security_system_virtual_appliance	ibm proventia network mail security system virtual appliance	eq	*

References

blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html

iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417

www.securityfocus.com/archive/1/502369/100/0/threaded

www.securityfocus.com/archive/1/504987/100/0/threaded

www.securityfocus.com/archive/1/504992/100/0/threaded

www.securityfocus.com/archive/1/504995/100/0/threaded

www.securityfocus.com/bid/34345

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.6%

JSON

Related for CVE-2009-1240

prion2 nvd2 cvelist2 cve1