CVE-2010-0155: CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Netwo...

Security readout for executives and security teams

CVE-2010-0155 affects the IBM Proventia Network Mail Security System appliance Local Management Interface. An authenticated remote user could manipulate an HTTP response from load.php, potentially causing response-splitting effects in an administrator-facing interface. The issue is old and product-specific, but still matters if legacy appliances remain deployed. Exposure is most likely in organizations still running IBM Proventia Network Mail Security System appliances with firmware earlier than 2.5, especially where the LMI is reachable by multiple administrators or non-isolated management networks. Treat this as a legacy exposure check rather than an emergency unless affected appliances are still present. Priority rises if management interfaces are broadly reachable or the appliance is unsupported. Mitigation focus: Identify any IBM Proventia Network Mail Security System appliances in the environment.; Confirm firmware is 2.5 or later, or check IBM guidance for supported remediation.; Restrict LMI access to trusted administrative networks only..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.