PT-2012-1286 · Websense · Websense Email Security

Publicado 2012-08-23 · Atualizado 2012-08-23 · CVE-2009-5121

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Websense Email Security version 7.1 before Hotfix 4

Description The issue allows remote attackers to bypass the sender-based blacklist. This is achieved by using the 8BITMIME EHLO keyword in the SMTP session.

Recommendations For Websense Email Security version 7.1 before Hotfix 4, apply Hotfix 4 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-5121

Produtos afetados

Websense Email Security

Referências · 2

• http://websense.com/support/article/t-kbarticle/Hotfix-4-for-Websense-Email-Security-v7-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-5121 · Nota de Segurança