CVEvulnerability
CVE-2001-1099
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-09-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-434
Description
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
Affected configurations
• symantec norton antivirus 2.5
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- http://www.securityfocus.com/archive/1/212724 Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/archive/1/213762 Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/bid/3305 Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7093 VDB Entry
- http://www.securityfocus.com/archive/1/212724 Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/archive/1/213762 Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/bid/3305 Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7093 VDB Entry