First published: Thu May 05 2011(Updated: )
Directory traversal vulnerability in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to read arbitrary files via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Proofpoint Protection Server | =5.5.5 | |
Proofpoint Protection Server | =6.0.2 | |
Proofpoint Protection Server | =5.5.3 | |
Proofpoint Protection Server | =6.2.0 | |
Proofpoint Protection Server | =6.1.1 | |
Proofpoint Messaging Security Gateway | <=6.2.0.263\:6.2.0.237 | |
Proofpoint Protection Server | =5.5.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-1902 is classified as a medium severity vulnerability.
To fix CVE-2011-1902, update your Proofpoint Protection Server and Messaging Security Gateway to the latest versions available.
CVE-2011-1902 allows remote attackers to read arbitrary files on affected systems, posing a risk to sensitive information.
CVE-2011-1902 affects Proofpoint Protection Server versions 5.5.3 through 6.2.0 and Messaging Security Gateway versions up to 6.2.0.263.
Yes, CVE-2011-1902 is still relevant because unpatched systems can still be exploited if they are in use.