Websense Email Security and Email Manager 'STEMWADM.EXE' Remote Denial of Service Vulnerability
BID:36740
Info
Websense Email Security and Email Manager 'STEMWADM.EXE' Remote Denial of Service Vulnerability
| Bugtraq ID: | 36740 |
| Class: | Design Error |
| CVE: |
CVE-2009-3749 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 20 2009 12:00AM |
| Updated: | Oct 27 2009 07:48PM |
| Credit: | NSO Research |
| Vulnerable: |
Websense Email Security 7.1 Websense Email Manager 7.1 |
| Not Vulnerable: |
Websense Email Security 7.1 Hotfix 4 Websense Email Manager 7.1 Hotfix 4 |
Discussion
Websense Email Security and Email Manager 'STEMWADM.EXE' Remote Denial of Service Vulnerability
Websense Email Security and Email Manager are prone to a remote denial-of-service vulnerability.
An attacker could exploit this issue to crash the affected applications, denying service to legitimate users.
Websense Email Security and Email Manager are prone to a remote denial-of-service vulnerability.
An attacker could exploit this issue to crash the affected applications, denying service to legitimate users.
Exploit / POC
Websense Email Security and Email Manager 'STEMWADM.EXE' Remote Denial of Service Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Websense Email Security and Email Manager 'STEMWADM.EXE' Remote Denial of Service Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Websense Email Security and Email Manager 'STEMWADM.EXE' Remote Denial of Service Vulnerability
References:
References:
- Websense Homepage (Websense)
- NSOADV-2009-002: Websense Email Security Web Administrator DoS (NSO Research