CVE-2002-1775 - NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote

CVE-2002-1775

Summary

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed

References

Vulnerable Configurations

cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 17-05-2024 - 00:20)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	4243
bugtraq	20020307 Various Vulnerabilities in Norton Anti-Virus 2002 20020308 Re: Edvice Security Services
xf	nav-nonrfc-bypass-protection(8390)

Last major update

17-05-2024 - 00:20

Published

31-12-2002 - 05:00

Last modified

17-05-2024 - 00:20