CVE-2009-1491: Input Validation
McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a message with an X-Testing header and no message body.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1491?
CVE-2009-1491 is classified as a low severity vulnerability due to its specific conditions for exploitation.
How do I fix CVE-2009-1491?
To mitigate CVE-2009-1491, ensure that you are using the latest update or patch for McAfee GroupShield and consider reviewing the configuration for header scanning.
Which versions of McAfee GroupShield are affected by CVE-2009-1491?
CVE-2009-1491 affects all versions of McAfee GroupShield for Microsoft Exchange, particularly in the context of Exchange Server 2000.
Can CVE-2009-1491 be exploited remotely?
Yes, CVE-2009-1491 can be exploited remotely by attackers through crafted messages that bypass virus detection.
Does CVE-2009-1491 affect Microsoft Exchange Server 2000?
While CVE-2009-1491 is primarily associated with McAfee GroupShield, it indirectly concerns users of Microsoft Exchange Server 2000 due to potential vulnerabilities in combination.