VULNERABILITY INTELLIGENCE
CVE-2001-1099
CVSS score5 MEDIUM
EPSS probability3.24%
CISA KEVNot currently listed
Published2001-09-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
Weakness classification
- CWE-434: Unrestricted Upload of File with Dangerous Type
Primary references
- cve@mitre.org — Third Party Advisory, VDB Entry, Vendor Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry, Vendor Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry, Vendor Advisory
- cve@mitre.org — VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — VDB Entry