CVE-2011-1904 An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allow...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary commands via unknown vectors, related to a "command injection" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| proofpoint messaging security gateway | <= 6.2.0.263\:6.2.0.237 | No fix listed |
| proofpoint protection server | = 5.5.3 | No fix listed |
| proofpoint protection server | = 5.5.4 | No fix listed |
| proofpoint protection server | = 5.5.5 | No fix listed |
| proofpoint protection server | = 6.0.2 | No fix listed |
| proofpoint protection server | = 6.1.1 | No fix listed |
| proofpoint protection server | = 6.2.0 | No fix listed |
References
- www.clearskies.net
- VU#790980 third-party-advisory us-government-resource
- support.proofpoint.com