CVE-2009-1240
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM...
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.
- Record
CVE-2009-1240- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.
- Record
CVE-2009-1240- Updated
- 2026-11-02
EUVDEUVD-2009-1239 No score
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.
- Record
EUVD-2009-1239- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-77p4-xq4m-gmp5 No score
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM...
Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.
- Record
GHSA-77p4-xq4m-gmp5- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1240 is a high vulnerability (CVSS 10.0) in Ibm Network Multi-function Security, published April 3, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/504995/100/0/threaded
blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html
iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417
nvd.nist.gov/vuln/detail/CVE-2009-1240
github.com/advisories/GHSA-77p4-xq4m-gmp5