CVE-2009-1240 Security feature bypass in n/a
Remote attackers can bypass malware detection in IBM Proventia products by using modified RAR archives, allowing malicious files to pass through security filters.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2009-1240?
CVE-2009-1240 is a critical vulnerability in n/a, published on 3 Apr 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.
Which versions are affected by CVE-2009-1240?
It affects 4 products.
Products include Ibm Network Multi-Function Security, Ibm Proventia Desktop Endpoint Security, Ibm Proventia Network Mail Security System, Ibm Proventia Network Mail Security System Virtual Appliance.
How do I fix CVE-2009-1240?
No fix has been published for CVE-2009-1240 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-1240 being exploited?
There is no known exploitation of CVE-2009-1240 in the wild and no public exploit code.
Sources
Also known as GHSA-77p4-xq4m-gmp5.