CVE-2009-1240
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.
Una vulnerabilidad no especificada en el motor Proventia de IBM versión 4.9.0.0.44 20081231, tal y como es usado en Proventia Network Mail Security System , Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), y posiblemente otros productos de IBM, permite a los atacantes remotos omitir la detección de malware por medio de un archivo RAR modificado.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2009-04-03 CVE Reserved
- 2009-04-03 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html | X_refsource_misc | |
| http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417 | X_refsource_misc | |
| http://www.securityfocus.com/archive/1/502369/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/504987/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/504992/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/504995/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/34345 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Proventia Desktop Endpoint Security Search vendor "Ibm" for product "Proventia Desktop Endpoint Security" | * | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Proventia Network Mail Security System Search vendor "Ibm" for product "Proventia Network Mail Security System" | * | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Network Multi-function Security Search vendor "Ibm" for product "Network Multi-function Security" | * | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Proventia Network Mail Security System Virtual Appliance Search vendor "Ibm" for product "Proventia Network Mail Security System Virtual Appliance" | * | - |
Affected
| ||||||