PT-2012-1293 · Websense · Websense V10000 Appliance

Published 2012-08-26 · Updated 2012-08-27 · CVE-2009-5128

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Websense V10000 appliance versions prior to 1.0.1

Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and process crash. This occurs when a large file is not properly handled during buffering.

Recommendations For versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-5128

Affected Products

Websense V10000 Appliance

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2009-5128 · Security Note
• http://kb.websense.com/pf/12/webfiles/V10000%20Documentation/V10000%20Patches/v1.0.1/V10000_v1.0.1_ReleaseNotes.pdf · Note