Description
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.
References
- 20090716 Re: Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details) mailing-list
- http://blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html
- http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417
- 34345 vdb-entry
- 20090715 Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details) mailing-list
- 20090402 [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details) mailing-list
- 20090716 Re[2]: Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details) mailing-list