VulnerabilityModified
CVE-2001-1099
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the…
MEDIUM 5.0EPSS 3.24%
Does this matter?
Lower severity and a low EPSS score (3.24%). Track it; it rarely justifies an emergency change on its own.
Description
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.24% probability · 88th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-434
- Affected
- symantec/norton antivirus
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/archive/1/212724Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/archive/1/213762Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/bid/3305Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7093VDB Entry
- http://www.securityfocus.com/archive/1/212724Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/archive/1/213762Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/bid/3305Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7093VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.