CVE-2009-1240
ibm: no CVSS score yet. EPSS 2.7% chance of exploitation in the next 30 days.
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:network_multi-function_security
- ibm:proventia_desktop_endpoint_security
- ibm:proventia_network_mail_security_system
- ibm:proventia_network_mail_security_system_virtual_appliance
References
- http://blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html
- http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417
- http://www.securityfocus.com/archive/1/502369/100/0/threaded
- http://www.securityfocus.com/archive/1/504987/100/0/threaded
- http://www.securityfocus.com/archive/1/504992/100/0/threaded