SQL Injection Vulnerability in Proofpoint Messaging Security Gateway and Protection Server
CVE-2011-1903

Currently unrated

Key Information:

Vendor

Proofpoint

Status
Protection Server
Messaging Security Gateway
Vendor
CVE Published:
5 May 2011

What is CVE-2011-1903?

An SQL injection vulnerability exists in select versions of Proofpoint Messaging Security Gateway and Proofpoint Protection Server. This flaw may allow remote attackers to execute arbitrary SQL commands through unspecified vectors, potentially leading to unauthorized access to sensitive information and manipulation of the database.

References

https://support.proofpoint.com/article.cgi?article_id=338413
x_refsource_MISC
http://www.kb.cert.org/vuls/id/790980
third-party-advisoryx_refsource_CERT-VN
http://www.clearskies.net/documents/css-advisory-css1105-...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.