Details of VAR-200006-0057

ID

VAR-200006-0057

CVE

CVE-2000-0478

TITLE

Norton Antivirus for Exchange Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200006-058

DESCRIPTION

In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server. Norton Antivirus for MS Exchange unzip engine improperly handles zip files attached in e-mails. If NAV for Exchange tries to scan a zip archive containing files with long filenames, it will crash and not scan any further emails until the service is restarted

Trust: 1.26

sources: NVD: CVE-2000-0478 // BID: 1351 // VULHUB: VHN-2057

AFFECTED PRODUCTS

vendor:	symantec	model:	norton antivirus	scope:	eq	version:	1.5	Trust: 1.6
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	2.0	Trust: 1.6
vendor:	symantec	model:	norton antivirus for ms exchange	scope:	eq	version:	2.0	Trust: 0.3
vendor:	symantec	model:	norton antivirus for ms exchange	scope:	eq	version:	1.5	Trust: 0.3

sources: BID: 1351 // CNNVD: CNNVD-200006-058 // NVD: CVE-2000-0478

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2000-0478
value:	MEDIUM
Trust: 1.0
CNNVD:	CNNVD-200006-058
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-2057
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2000-0478
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-2057
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-2057 // CNNVD: CNNVD-200006-058 // NVD: CVE-2000-0478

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2000-0478

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200006-058

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200006-058

EXTERNAL IDS

db:	BID	id:	1351	Trust: 2.0
db:	OSVDB	id:	6266	Trust: 1.7
db:	NVD	id:	CVE-2000-0478	Trust: 1.7
db:	CNNVD	id:	CNNVD-200006-058	Trust: 0.7
db:	XF	id:	4709	Trust: 0.6
db:	BUGTRAQ	id:	20000614 VULNERABILITIES IN NORTON ANTIVIRUS FOR EXCHANGE	Trust: 0.6
db:	VULHUB	id:	VHN-2057	Trust: 0.1

sources: VULHUB: VHN-2057 // BID: 1351 // CNNVD: CNNVD-200006-058 // NVD: CVE-2000-0478

REFERENCES

url:	http://www.securityfocus.com/bid/1351	Trust: 1.7
url:	http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html	Trust: 1.7
url:	http://www.osvdb.org/6266	Trust: 1.7
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/4709	Trust: 1.1
url:	http://xforce.iss.net/static/4709.php	Trust: 0.6
url:	http://www.symantec.com/nav/nav_msexch/	Trust: 0.3

sources: VULHUB: VHN-2057 // BID: 1351 // CNNVD: CNNVD-200006-058 // NVD: CVE-2000-0478

CREDITS

Posted to Bugtraq on June 14, 2000 by Jim Rosenberg <jr@amanue.com>.

Trust: 0.3

sources: BID: 1351

SOURCES

db:	VULHUB	id:	VHN-2057
db:	BID	id:	1351
db:	CNNVD	id:	CNNVD-200006-058
db:	NVD	id:	CVE-2000-0478

LAST UPDATE DATE

2024-08-14T14:09:13.264000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-2057	date:	2017-10-10T00:00:00
db:	BID	id:	1351	date:	2000-06-14T00:00:00
db:	CNNVD	id:	CNNVD-200006-058	date:	2005-10-12T00:00:00
db:	NVD	id:	CVE-2000-0478	date:	2017-10-10T01:29:08.170

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-2057	date:	2000-06-14T00:00:00
db:	BID	id:	1351	date:	2000-06-14T00:00:00
db:	CNNVD	id:	CNNVD-200006-058	date:	2000-06-14T00:00:00
db:	NVD	id:	CVE-2000-0478	date:	2000-06-14T04:00:00