CVE-2011-1901
First published: Thu May 05 2011(Updated: )
The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to bypass authentication via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Proofpoint Protection Server | =5.5.5 | |
| Proofpoint Protection Server | =6.0.2 | |
| Proofpoint Protection Server | =5.5.3 | |
| Proofpoint Protection Server | =6.2.0 | |
| Proofpoint Protection Server | =6.1.1 | |
| Proofpoint Messaging Security Gateway | <=6.2.0.263\:6.2.0.237 | |
| Proofpoint Protection Server | =5.5.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-1901?
CVE-2011-1901 is classified as a critical vulnerability due to its ability to allow remote authentication bypass.
How do I fix CVE-2011-1901?
To fix CVE-2011-1901, upgrade to a version of Proofpoint Protection Server or Proofpoint Messaging Security Gateway that is not vulnerable.
Which versions are affected by CVE-2011-1901?
CVE-2011-1901 affects Proofpoint Protection Server versions 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0, as well as Messaging Security Gateway versions up to 6.2.0.263 and 6.2.0.237.
What types of attacks can exploit CVE-2011-1901?
CVE-2011-1901 can be exploited by remote attackers to bypass authentication and gain unauthorized access to the system.
Is there a workaround for CVE-2011-1901?
There are no known effective workarounds for CVE-2011-1901 beyond upgrading to secure versions.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/references
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/proofpoint
- canonical/proofpoint protection server
- version/proofpoint protection server/5.5.5
- version/proofpoint protection server/6.0.2
- version/proofpoint protection server/5.5.3
- version/proofpoint protection server/6.2.0
- version/proofpoint protection server/6.1.1
- canonical/proofpoint messaging security gateway
- version/proofpoint messaging security gateway/6.2.0.263\:6.2.0.237
- version/proofpoint protection server/5.5.4