CVE-2001-1099

Опубликовано: 07 сент. 2001

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.

Ссылки

http://www.securityfocus.com/archive/1/212724
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/archive/1/213762
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/bid/3305
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7093
VDB Entry
http://www.securityfocus.com/archive/1/212724
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/archive/1/213762
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/bid/3305
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7093
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:symantec:norton_antivirus:2.5:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02829

Низкий

5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-736q-94f7-6gfq

github

больше 3 лет назад