Description
Multiple unspecified vulnerabilities in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allow remote attackers to bypass detection of malware via a modified (1) ZIP or (2) CAB archive, a related issue to CVE-2009-1240.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/504995/100/0/threaded
Various Sources x_refsource_misc
http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/504987/100/0/threaded
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/504992/100/0/threaded
Scores
EPSS
0.0228
EPSS Percentile
81.3%
Details
Status
published
Products (4)
ibm/proventia_desktop_endpoint_security
ibm/proventia_network_mail_security_system
ibm/proventia_network_mail_security_system_vitual_appliance
ibm/proventia_network_multi-function_security
Published
Jul 20, 2009
Tracked Since
Feb 18, 2026