CVE-2002-1695: Medium severity symantec norton internet security vulnerability
Norton Internet Security 2001 opens log files with FILESHAREREAD and FILESHAREWRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1695?
CVE-2002-1695 is considered a medium severity vulnerability due to its potential for unauthorized modification of log files.
How do I fix CVE-2002-1695?
To fix CVE-2002-1695, restrict the log file access permissions to prevent remote attackers from modifying the logs.
Which software is affected by CVE-2002-1695?
CVE-2002-1695 affects Norton Internet Security 2001, Microsoft Internet Information Services 5.0, and Microsoft Internet Information Server 4.0.
What type of attack can exploit CVE-2002-1695?
CVE-2002-1695 can be exploited through remote attacks that modify log files while Norton Internet Security is running.
Is there a patch available for CVE-2002-1695?
There is no specific patch for CVE-2002-1695; users should implement changes to file permissions as a mitigation strategy.