CVE-2001-1099: Malicious File Upload

Published Sep 7, 2001

Updated

The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.

Affected Software

3 affected components

Symantec Norton Antivirus=2.5

Microsoft Exchange Server=2000

Microsoft Exchange Server=2000-sp1

Event History

Sep 7, 2001

CVE Published

04:00 AM

Data Sourced

04:00 AM

DescriptionWeaknessAffected Software

Jun 25, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1099?

CVE-2001-1099 is considered a moderate security vulnerability due to the potential for remote attackers to discover sensitive file paths.

How do I fix CVE-2001-1099?

To fix CVE-2001-1099, update Norton AntiVirus to a newer version that addresses this vulnerability.

What does CVE-2001-1099 affect?

CVE-2001-1099 specifically affects Norton AntiVirus for Microsoft Exchange 2000 version 2.5.

Can CVE-2001-1099 lead to further attacks?

Yes, if exploited, CVE-2001-1099 could potentially allow further attacks by revealing the victim's INBOX file path.

Is there a workaround for CVE-2001-1099?

A workaround for CVE-2001-1099 may include disabling the automatic processing of attachments in Norton AntiVirus.