CVE-2011-1902

Directory traversal vulnerability in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2011-1904

An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary commands via unknown vectors, related to a "command...

CVE-2011-1903

SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Sql injection

SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in unspecified administrative modules in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allow remote attackers to hijack the authentication ...

Command injection

An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary commands via unknown vectors, related to a "command...

CVE-2011-1901

The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to bypass authentication via unspecified vectors...

CVE-2011-1904

CVE-2011-1904 affects Proofpoint products: Messaging Security Gateway 6.2.0.263/6.2.0.237 and earlier versions of Protection Server (5.5.3–5.5.5, 6.0.2, 6.1.1, 6.2.0). The issue is described as an unspecified function in the web interface that allows remote command execution via unknown vectors, ...

CVE-2011-1903

The entry CVE-2011-1903 describes a SQL injection vulnerability in an unspecified function of Proofpoint Messaging Security Gateway (versions up to 6.2.0.263:6.2.0.237) and Proofpoint Protection Server (5.5.3–5.5.5, 6.0.2, 6.1.1, 6.2.0). The vulnerability allows remote attackers to execute arbitr...

CVE-2011-1905

Technical details about CVE-2011-1905 are not publicly available in the provided connected documents. The records summarize CSRF vulnerabilities in Proofpoint products but do not specify affected components, versions beyond general ranges, or remediation details. Monitor for updates.

CVE-2011-1902

Directory traversal vulnerability in the web interface affects Proofpoint products: Messaging Security Gateway versions up to 6.2.0.263:6.2.0.237 and Proofpoint Protection Server versions 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0. The issue allows remote attackers to read arbitrary files via u...

CVE-2011-1901

The CVE-2011-1901 entry concerns the mail-filter web interface in Proofpoint products: Proofpoint Messaging Security Gateway (versions up to 6.2.0.263:6.2.0.237) and Proofpoint Protection Server (5.5.3–5.5.5, 6.0.2, 6.1.1, 6.2.0). The flaw allows remote attackers to bypass authentication via unsp...

PT-2011-3464

Name of the Vulnerable Software and Affected Versions Proofpoint Messaging Security Gateway versions 6.2.0.263 through 6.2.0.237 and earlier Proofpoint Protection Server versions 6.2.0, 6.1.1, 6.0.2, 5.5.5, 5.5.4, 5.5.3 and earlier Description The issue allows remote attackers to execute arbitrar...

PT-2011-3462

Name of the Vulnerable Software and Affected Versions Proofpoint Messaging Security Gateway versions 6.2.0.263 through 6.2.0.237 and earlier Proofpoint Protection Server versions 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, 6.2.0 Description The issue allows remote attackers to bypass authentication in the...

PT-2011-3463

Name of the Vulnerable Software and Affected Versions Proofpoint Messaging Security Gateway versions 6.2.0.263 through 6.2.0.237 and earlier Proofpoint Protection Server versions 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 Description A directory traversal issue exists in the web interface,...

PT-2011-3466

Name of the Vulnerable Software and Affected Versions Proofpoint Messaging Security Gateway versions 6.2.0.263 through 6.2.0.237 and earlier Proofpoint Protection Server versions 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 Description The issue allows remote attackers to hijack the authenticatio...

CVE-2011-1904: Improper Neutralization of Special Elements used in an OS Command

An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary commands via unknown vectors, related to a "command...

PT-2011-3465

Name of the Vulnerable Software and Affected Versions Proofpoint Messaging Security Gateway versions 6.2.0.263 through 6.2.0.237 and earlier Proofpoint Protection Server versions 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 Description The issue is related to a command injection problem, allowing...

CVE-2011-1903: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2011-1901: Improper Authentication

The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to bypass authentication via unspecified vectors...