CVE-2010-0153

CVE-2010-0153 pertains to the IBM Proventia Network Mail Security System (PNMSS) Local Management Interface (LMI). The issue is a set of cross-site request forgery (CSRF) vulnerabilities in firmware before 2.5.0.2 that allow an attacker, via remote access, to hijack the authentication of administ...

CVE-2010-0152

The CVE-2010-0152 entry corresponds to multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) of the IBM Proventia Network Mail Security System (PNMSS) appliance, affecting firmware prior to 2.5.0.2. The XSS flaws enable injection of arbitrary script/HTML via ...

CVE-2010-0154

The CVE-2010-0154 entry concerns IBM Proventia Network Mail Security System (PNMSS) with firmware before 2.5. The vulnerability is an Insecure Direct Object Reference in the Local Management Interface (LMI) at sla/index.php, where an authenticated remote attacker can manipulate the l parameter (....

CVE-2010-0155

The CVE-2010-0155 issue affects IBM Proventia Network Mail Security System (PNMSS) with firmware older than 2.5, specifically the Local Management Interface (LMI). A CRLF injection vulnerability exists in load.php that is exploitable by remote authenticated users via the javaVersion parameter, en...

CVE-2009-1240

The IBM Proventia engine (version 4.9.0.0.44 20081231) used in multiple IBM products (Network Mail Security System, Virtual Appliance, Desktop Endpoint Security, MFS) is documented to bypass malware detection when processing modified archive files. The related CVE-2009-2543 notes a similar issue ...