CVE-2002-1777 - NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote

CVE-2002-1777

Summary

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension such as .nch or .dbx, but a malicious extension in the Content-Disposition field, which is used by Outlook to obtain the file name. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but Norton AntiVirus or the Office plug-in would detect the virus before it is executed

References

Vulnerable Configurations

cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 17-05-2024 - 00:20)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	4246
bugtraq	20020307 Various Vulnerabilities in Norton Anti-Virus 2002 20020308 Re: Edvice Security Services
xf	nav-contenttype-bypass-protection(8392)

Last major update

17-05-2024 - 00:20

Published

31-12-2002 - 05:00

Last modified

17-05-2024 - 00:20