CVE-2009-1240: IBM Network Multi-Function Security

High severity, CVSS 10.0. EPSS: 2.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.

Affected products

• IBM Network Multi-Function Security: any version
• IBM Proventia Desktop Endpoint Security: any version
• IBM Proventia Network Mail Security System: any version
• IBM Proventia Network Mail Security System Virtual Appliance: any version

Published 2009-04-03. Last modified 2026-06-16.