CVE-2002-2206: High severity Symantec Norton Antivirus vulnerability

Published Dec 31, 2002

Updated

The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU consumption and crash) via a long username with multiple /localhost entries.

Affected Software

1 affected component

Symantec Norton Antivirus=2001

Event History

Dec 31, 2002

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Nov 16, 2005

CVE Published

via MITRE·09:17 PM

Data Sourced

via MITRE·09:17 PM

Description

Frequently Asked Questions

What is the severity of CVE-2002-2206?

CVE-2002-2206 is considered a denial of service vulnerability that could severely impact the performance of the affected system.

How do I fix CVE-2002-2206?

To mitigate CVE-2002-2206, it is recommended to upgrade to a later version of Norton AntiVirus that does not contain this vulnerability.

Who is affected by CVE-2002-2206?

CVE-2002-2206 affects users of Norton AntiVirus 2001 specifically using the POP3 proxy service.

What type of attack is demonstrated in CVE-2002-2206?

CVE-2002-2206 demonstrates a denial of service attack that can lead to high CPU consumption and crashing of the POP3 proxy service.

Can CVE-2002-2206 be exploited remotely?

CVE-2002-2206 requires local access to exploit, meaning it cannot be exploited remotely.