First published: Thu May 05 2011(Updated: )
SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Proofpoint Protection Server | =5.5.5 | |
Proofpoint Protection Server | =6.0.2 | |
Proofpoint Protection Server | =5.5.3 | |
Proofpoint Protection Server | =6.2.0 | |
Proofpoint Protection Server | =6.1.1 | |
Proofpoint Messaging Security Gateway | <=6.2.0.263\:6.2.0.237 | |
Proofpoint Protection Server | =5.5.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-1903 has a high severity rating due to its potential for remote attackers to execute arbitrary SQL commands.
To fix CVE-2011-1903, it is recommended to upgrade to the latest version of Proofpoint Protection Server and Messaging Security Gateway.
CVE-2011-1903 affects Proofpoint Protection Server versions 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 and Messaging Security Gateway versions up to 6.2.0.263:6.2.0.237.
CVE-2011-1903 is categorized as an SQL injection vulnerability.
Yes, CVE-2011-1903 can be exploited remotely by attackers with the ability to send crafted SQL commands.