EUVD-2009-5076

Malware in sbrugna...

Session fixation

Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by using the 8BITMIME EHLO keyword in the SMTP session...

CVE-2009-5121

Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by using the 8BITMIME EHLO keyword in the SMTP session...

CVE-2009-5121

Websense Email Security 7.1 prior to Hotfix 4 is vulnerable to bypassing the sender-based blacklist via the 8BITMIME EHLO keyword in the SMTP session. The root cause is the SMTP handling that permits 8BITMIME EHLO, enabling remote attackers to circumvent blacklist checks. The public description c...