CVE-2009-1240
Last modified
CVE-2009-1240 is a vulnerability of currently unknown severity. Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.. EPSS estimates a 2.73% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Proventia Desktop Endpoint Security | All versions |
| Ibm | Proventia Network Mail Security System | All versions |
| Ibm | Network Multi-Function Security | All versions |
| Ibm | Proventia Network Mail Security System Virtual Appliance | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-1240?
How severe is CVE-2009-1240?
How do I fix CVE-2009-1240?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-1234Opera 9.64 allows remote attackers to cause a denial of serv…
- CVE-2009-1235XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earli…
- CVE-2009-1236Heap-based buffer overflow in the AppleTalk networking stack…
- CVE-2009-1237Multiple memory leaks in XNU 1228.3.13 and earlier on Apple …
- CVE-2009-1238Race condition in the HFS vfs sysctl interface in XNU 1228.8…
- CVE-2009-1239IBM DB2 9.1 before FP7 returns incorrect query results in ce…
- CVE-2009-1241Unspecified vulnerability in ClamAV before 0.95 allows remot…
- CVE-2009-1242The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX im…
- CVE-2009-1243net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs …5.5
- CVE-2009-1244Unspecified vulnerability in the virtual machine display fun…
- CVE-2009-1245Multiple SQL injection vulnerabilities in the insert_to_past…
- CVE-2009-1246Multiple directory traversal vulnerabilities in Blogplus 1.0…
Are you affected by CVE-2009-1240?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST