CVE-2000-0478: Medium severity Symantec Norton Antivirus vulnerability

Published Jun 14, 2000

Updated

In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server.

Affected Software

2 affected components

Symantec Norton Antivirus=2.0

Symantec Norton Antivirus=1.5

Event History

Jun 14, 2000

CVE Published

04:00 AM

Oct 13, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0478?

CVE-2000-0478 is considered a medium severity vulnerability due to its ability to allow viruses to bypass security measures.

How do I fix CVE-2000-0478?

To fix CVE-2000-0478, upgrade to a newer version of Symantec Norton Antivirus that does not exhibit the fail-open behavior.

What systems are impacted by CVE-2000-0478?

CVE-2000-0478 affects Symantec Norton Antivirus versions 1.5 and 2.0 when used with Microsoft Exchange.

What does a "fail-open" state mean in the context of CVE-2000-0478?

In the context of CVE-2000-0478, a "fail-open" state means that the antivirus software fails to block incoming threats, allowing viruses to pass through.

Is CVE-2000-0478 still a concern for modern systems?

CVE-2000-0478 is less of a concern for modern systems as most users have upgraded to more current anti-virus solutions with improved security features.