Page 4 of 36 results (0.001 seconds)

CVSS: 5.0EPSS: 2%CPEs: 3EXPL: 0

07 Sep 2001 — The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice. • http://www.securityfocus.com/archive/1/212724 • CWE-434: Unrestricted Upload of File with Dangerous Type •

CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0

21 Sep 2000 — Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system. • http://www.securityfocus.com/bid/1533 •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1

14 Jun 2000 — Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that contains long file names. • http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1

14 Jun 2000 — In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server. • http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1

17 Mar 2000 — Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL. • http://www.securityfocus.com/bid/1064 •

CVSS: 9.1EPSS: 0%CPEs: 2EXPL: 0

09 Apr 1999 — Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navieg.ini file for NAVIEG, and (2) the ModifyPassword registry key in NAVMSE. • http://marc.info/?l=ntbugtraq&m=92370067416739&w=2 •