CVE-2006-2123

Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized NAV before 3.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2006-2123

CVE-2006-2123 affects Network Administration Visualized (NAV) prior to version 3.0.1. The NAV report interface contains multiple SQL injection vulnerabilities that could allow a remote attacker to execute arbitrary SQL commands via unknown vectors. The underlying issue is untrusted input handling...

CVE-2006-2123

Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized NAV before 3.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2002-1777

Symantec Norton AntiVirus (NAV) 2002 is affected. The issue lets an attacker bypass e-mail scanning by placing an allowed filename in the Content-Type header with an excluded extension (e.g., .nch, .dbx) while using a malicious extension in the Content-Disposition header (used by Outlook to obtai...

One more way to bypass NAV

Dear [email protected], I've updated "Bypassing content filtering software" whitepaper http://www.security.nnov.ru/advisories/content.asp to include new way to bypass content filtering software. It confirmed to work with NAV and not to work with McAffee and KAV AVP. Symantec was contected...