5

CVE-2001-1099

EPSS 2.83%
Veröffentlicht 07.09.2001 04:00:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Symantec ≫ Norton Antivirus Version2.5

Microsoft ≫ Exchange Server Version2000 Update-
Microsoft ≫ Exchange Server Version2000 Updatesp1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.83%	0.857

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

http://www.securityfocus.com/archive/1/212724

Third Party Advisory

Vendor Advisory

VDB Entry

http://www.securityfocus.com/archive/1/213762

Third Party Advisory

Vendor Advisory

VDB Entry

http://www.securityfocus.com/bid/3305

Third Party Advisory

Vendor Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/7093

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2001-1099

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2001-1099

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2001-1099

EUVD