IBM Proventia Network Mail Security System

ソフト名：IBM Proventia Network Mail Security System 1.6/2.5
回避策：アップデートにて対応
脆弱性：CSRF, XSS, CRLFインジェクション, Webキャッシュ汚染, 認証資格情報の奪取
ソース：http://www-935.ibm.com/services/us/index.wss/offering/iss/a1027071
http://www.ventuneac.net/security-advisories/MVSA-10-006
http://www.ventuneac.net/security-advisories/MVSA-10-007
http://www.ventuneac.net/security-advisories/MVSA-10-009
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0152
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0153
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0155
http://secunia.com/advisories/41401
http://securitytracker.com/alerts/2010/Sep/1024429.html
http://www.vupen.com/english/advisories/2010/2376
CVE：CVE-2010-0152, CVE-2010-0153, CVE-2010-0155
危険性：Medium Risk