CVE-2009-3749

The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

7.64% chance of exploitation in the next 30 days, 95th percentile

Published

2009-10-22

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/9980

Security advisories

• http://secunia.com/advisories/37091
• http://www.vupen.com/english/advisories/2009/2987
• http://kb.websense.com/article.aspx?article=4786&p=12
• http://kb.websense.com/display/4/kb/article.aspx?aid=4786
• http://www.securityfocus.com/bid/36740

References

• CVE Record
• NVD entry