NetSight
medium5.0

CVE-2009-5131

The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote attackers to bypass intend…

Impact

The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote attackers to bypass intended access restrictions and send e-mail messages via an SMTP session.

Affected products

VendorProductAffected versions
WebsenseWebsense Email Security
through 7.0
Version 6.1

Weakness classification

References