← Back

CVE-2001-1099

nvd nist
Published: Sep 7, 2001Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.

Affected (1)

Symantec
1 product
Norton Antivirus
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Norton Antivirus
Version 2.5
Running on/withPlatform Versions
Microsoft
Exchange Server
Version 2000
Microsoft
Exchange Server
Version 2000 sp1

Related CWEs

CWE-434
Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (8)

Source: cve@mitre.org
Third Party AdvisoryVDB EntryVendor Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB EntryVendor Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB EntryVendor Advisory
Source: cve@mitre.org
VDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB Entry

Timeline

No history available yet.