The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4…

published 2009-10-22 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-3721

cvss: 5.0; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 7.6%; EPSS 7.6% chance of exploitation in 30 days, percentile 94%
public exploits: 1; Exploit-DB

The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response.

Patch / fix

links 2

Timeline

2009-10-20 First public exploit (EDB-9980)
2009-10-22 Published

Exploit prediction

7.64% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-9980 Websense Email Security - Denial of Service dos, 2009-10-20
sotiriu.de http://sotiriu.de/adv/NSOADV-2009-002.txt referenced PoC, tagged "exploit" by a source, unverified
securityfocus.com http://www.securityfocus.com/bid/36740 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	5.0	AV:N/AC:L/Au:N/C:N/I:N/A:P

References

kb.websense.com /display/4/kb/article.aspx?aid=4786
patch
kb.websense.com /article.aspx?article=4786&p=12
patch
sotiriu.de /adv/NSOADV-2009-002.txt
exploit
securityfocus.com /bid/36740
vdb-entry, exploit
vupen.com /english/advisories/2009/2987
vdb-entry, vendor-advisory
secunia.com /advisories/37091
third-party-advisory, vendor-advisory
securityfocus.com /archive/1/507329/100/0/threaded
mailing-list

Sources

CVE List CVE-2009-3749
NVD CVE-2009-3749

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary