CVE-2009-3749

Name: CVE-2009-3749
Creator: NVD / NIST
Published: 2009-10-22T17:30:00.267+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 7.64%

Last modified Jun 16, 2026

CVE-2009-3749 is a vulnerability of currently unknown severity. The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response.. EPSS estimates a 7.64% chance of exploitation in the next 30 days.

Description

The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response.

Metrics

EPSS Probability

7.64%

93.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Websense	Email Security	7.1
Websense	Personal Email Manager	7.1

References

http://kb.websense.com/article.aspx?article=4786&p=12Patch
http://kb.websense.com/display/4/kb/article.aspx?aid=4786Patch
http://secunia.com/advisories/37091Vendor Advisory
http://sotiriu.de/adv/NSOADV-2009-002.txtExploit
http://www.securityfocus.com/archive/1/507329/100/0/threaded
http://www.securityfocus.com/bid/36740Exploit
http://www.vupen.com/english/advisories/2009/2987Vendor Advisory
http://kb.websense.com/article.aspx?article=4786&p=12Patch
http://kb.websense.com/display/4/kb/article.aspx?aid=4786Patch
http://secunia.com/advisories/37091Vendor Advisory
http://sotiriu.de/adv/NSOADV-2009-002.txtExploit
http://www.securityfocus.com/archive/1/507329/100/0/threaded
http://www.securityfocus.com/bid/36740Exploit
http://www.vupen.com/english/advisories/2009/2987Vendor Advisory

Timeline

Published: Oct 22, 2009
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2009-3749?

How severe is CVE-2009-3749?

Severity scoring for CVE-2009-3749 is pending analysis. The EPSS model estimates a 7.64% probability of exploitation in the next 30 days.

How do I fix CVE-2009-3749?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-3749?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST