CVE-1999-1380

Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, creating an insecure scripting context that allows remote attackers to execute arbitrary commands via the run option through malicious web pages loaded in browsers like Internet Explorer 3.0....

Re: Edvice Security Services <[email protected], 000701c1c5fb$c168f970$5a01010a@mic2000

On 7 March, Edivice Security submitted the following: To: BugTraq Subject: Various Vulnerabilities in Norton Anti-Virus 2002 Date: Mar 7 2002 6:16PM Author: Edvice Security Services [email protected] Message-ID: 000701c1c5fb$c168f970$5a01010a@mic2000 Various Vulnerabilities in Norton...

Various Vulnerabilities in Norton Anti-Virus 2002

Various Vulnerabilities in Norton Anti-Virus 2002 ++++++++++++++++++++++++++++++++++++ Scope ---------- Edvice recently tested NAV 2002's ability to detect viruses in incoming e-mail messages. NAV 2002 includes an Email protection feature that scans incoming and outgoing e-mails for viruses. The...

Слабые разрешения в Norton Antivirus (weak permissions)

Файл конфигурации с общими настройками хранится в профиле All Users открытый на запись группе Users...

NAVCE 7.51 default permission exploit

============================================================ Topic: ===== Default NTFS permissions post-software install allow local user security context to modify "managed" Norton AntiVirus Corporate Edition 7.51 client configuration. Affected: ======== Norton AntiVirus Corporate Edition NAVCE...

CVE-1999-1323

Norton AntiVirus for Internet Email Gateways NAVIEG 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange NAVMSE 1.5 and earlier, store the administrator password in cleartext in 1 the navieg.ini file for NAVIEG, and 2 the ModifyPassword registry key in NAVMSE...

CVE-1999-1323

CVE-1999-1323 affects Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier. The root cause is that administrator passwords are stored in cleartext in (1) the navieg.ini file for NAVIEG and (2) the ModifyPassword re...

CVE-2001-1099

The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice...

NAV 5.0 and embedded files

Product: Norton Symantec Antivirus Platform: Win32 Versions: 5.0 Problem: Files 'embedded' in Word and Excel documents appear to evade scanning. I have noticed what appears to me to be a disturbing lapse in the scanning procedure of Norton Antivirus 5.0 Win32. I am looking for corroboration and...

Проблема с внедренными (embedded) файлами в Norton Antivirus

Не производится проверка файлов внедренных в метафайлы...

CVE-2000-0793

Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system...

CVE-2000-0477

Buffer overflow in Norton Antivirus for Exchange NavExchange allows remote attackers to cause a denial of service via a .zip file that contains long file names...

CVE-2000-0478

Norton Antivirus for Exchange (NavExchange) can enter a fail-open state, causing antivirus checks to fail and allowing viruses to pass through the server. The vulnerability, CVE-2000-0478, is documented across CVE/NVD records with a MEDIUM base score on CVSS v2 (AV:N/AC:L/Au:N/C:N/I:P/A:N). The c...

CVE-2000-0477

CVE-2000-0477 describes a buffer overflow in Norton Antivirus for Exchange (NavExchange) that could allow a remote attacker to cause a denial of service by delivering a ZIP file containing long file names. The available sources consistently state this as a vulnerability in NavExchange, with no de...

CVE-2000-0238

Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL...

CVE-1999-1004

CVE-1999-1004 is a buffer overflow in the POP server POProxy used by Norton Anti-Virus NAV2000, triggered by a large USER command. The affected component is the POProxy POP server; underlying cause is a buffer overflow condition. Impact per the entry includes partial availability impact with no c...

CVE-2000-0478

In some cases, Norton Antivirus for Exchange NavExchange enters a "fail-open" state which allows viruses to pass through the server...

CVE-2000-0238

The CVE-2000-0238 entry concerns the web server component of Norton AntiVirus for Internet Email Gateways, where a buffer overflow can be triggered by a long URL to cause a denial of service. Public documentation in the connected sources reiterates the impact (DoS) but does not specify vulnerable...

CVE-1999-1004

Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command...

CVE-2000-0793

CVE-2000-0793 affects Norton AntiVirus 5.00.01C when used with the Novell Netware client, where the auto-protection service fails to restart after the first user logs off. The CVSS2 base metrics indicate a HIGH impact across confidentiality, integrity, and availability with network access and no ...