CVE:CVE-2010-0153
CNNVD:CNNVD-201009-113
Local Management Interface是基本帧中继规范的增强集。
包含固件的IBM Proventia Network Mail Security System (PNMSS)应用程序2.5.0.2之前版本中的Local Management Interface (LMI)中存在多个跨站请求伪造漏洞。远程攻击者可以劫持(1)改变设置或者(2)进行导致拒绝服务攻击的管理员认证请求。
solution:Upgrade ibm proventia_network_mail_security_system_virtual_appliance to a higher version than *; Upgrade ibm proventia_network_mail_security_system_virtual_appliance_firmware to a higher version than 1.6,2.5,and avoid the version 1.6,2.5