PT-2012-1357 · Websense · Websense Web Security/Web Filter

Publicado 2012-08-23 · Atualizado 2017-08-29 · CVE-2010-5145

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Websense Web Security and Web Filter versions prior to 6.3.1 Hotfix 136 Websense Web Security and Web Filter versions 7.x prior to 7.1.1

Description The issue allows remote attackers to cause a denial of service, resulting in a filtering outage, by sending a crafted sequence of characters in a URI.

Recommendations For versions prior to 6.3.1 Hotfix 136, update to version 6.3.1 Hotfix 136 or later. For versions 7.x prior to 7.1.1, update to version 7.1.1 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-5145

Produtos afetados

Websense Web Security/Web Filter

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-5145 · Nota de Segurança
• http://websense.com/content/support/library/web/v711/ws711_known_issues/ws711_known_issues.pdf · Aviso do Fabricante
• http://websense.com/content/support/library/web/v711/ws711_known_issues/first.aspx · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78345 · Nota