CVE-2009-5131
Published Aug 26, 2012
Last updated 12 years ago
Overview
- Description
- The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote attackers to bypass intended access restrictions and send e-mail messages via an SMTP session.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:websense:websense_email_security:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F2D8740-2BD8-47F9-B76A-D40D944997D6",
"versionEndIncluding": "7.0"
},
{
"criteria": "cpe:2.3:a:websense:websense_email_security:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B57542A-390F-4447-BD4A-CDD758D715D6"
},
{
"criteria": "cpe:2.3:a:websense:websense_email_security:6.1:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9949AE6C-A57E-4B37-831E-DB4C462F5FB4"
}
],
"operator": "OR"
}
]
}
]