PT-2010-1969 · Ibm · Ibm Proventia Network Mail Security System

Published 2010-09-14 · Updated 2018-10-10 · CVE-2010-0154

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Proventia Network Mail Security System (PNMSS) appliance with firmware prior to 2.5

Description The issue allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter in the sla/index.php file of the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance. This is related to an "Insecure Direct Object Reference" issue.

Recommendations For IBM Proventia Network Mail Security System (PNMSS) appliance with firmware prior to 2.5, update the firmware to version 2.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the sla/index.php file in the LMI to minimize the risk of exploitation. Avoid using the l parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2010-0154

Affected Products

Ibm Proventia Network Mail Security System

References · 3

• 🔥 http://ventuneac.net/security-advisories/MVSA-10-008 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-0154 · Security Note
• http://securityfocus.com/archive/1/513637/100/0/threaded · Note