What’s Vulnerable › Vulnerabilities

CVE-2009-2543

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-07-20 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allow remote attackers to bypass detection of malware via a modified (1) ZIP or (2) CAB archive, a related issue to CVE-2009-1240.

Affected products

• IBM Proventia Desktop Endpoint Security: all versions
• IBM Proventia Network Mail Security System: all versions
• IBM Proventia Network Mail Security System Vitual Appliance: all versions
• IBM Proventia Network Multi-Function Security: all versions

References

• http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417
• http://www.securityfocus.com/archive/1/504987/100/0/threaded
• http://www.securityfocus.com/archive/1/504992/100/0/threaded
• http://www.securityfocus.com/archive/1/504995/100/0/threaded
• http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417
• http://www.securityfocus.com/archive/1/504987/100/0/threaded
• http://www.securityfocus.com/archive/1/504992/100/0/threaded
• http://www.securityfocus.com/archive/1/504995/100/0/threaded

Get alerted when CVE-2009-2543 or the next vulnerability affects your stack