PT-2012-1296 · Websense · Websense Email Security

Published 2012-08-26 · Updated 2012-08-27 · CVE-2009-5131

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Websense Email Security versions prior to 7.1

Description The issue concerns the Receive Service in Websense Email Security, where it fails to recognize domain extensions in the blacklist. This allows remote attackers to bypass intended access restrictions and send email messages via an SMTP session.

Recommendations For versions prior to 7.1, update to version 7.1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-5131

Affected Products

Websense Email Security

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2009-5131 · Security Note
• http://websense.com/support/article/t-kbarticle/Release-Notes-for-Websense-Email-Security-v7-1 · Note