5

CVE-2001-1099

EPSS 2.83%
Veröffentlicht 07.09.2001 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Symantec ≫ Norton Antivirus Version2.5

Microsoft ≫ Exchange Server Version2000 Update-
Microsoft ≫ Exchange Server Version2000 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.83%	0.857

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

http://www.securityfocus.com/archive/1/212724

Third Party Advisory

Vendor Advisory

VDB Entry

http://www.securityfocus.com/archive/1/213762

Third Party Advisory

Vendor Advisory

VDB Entry

http://www.securityfocus.com/bid/3305

Third Party Advisory

Vendor Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/7093

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2001-1099

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2001-1099

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2001-1099

EUVD