CVE

Id
4877  
CVE No.
CVE-2002-0485  
Status
Candidate  
Description
Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients.  
Phase
Modified (20040811)  
Votes
ACCEPT(1) Prosser | MODIFY(1) Frech | NOOP(5) Armstrong, Cole, Cox, Foat, Wall  
Comments
CHANGE> [Frech changed vote from REVIEWING to MODIFY] | Frech> XF:nav-case-bypass-protection(9860) | Prosser> This issues was a continuation of an earlier reported issue | with non-RFC compliant MIME headers. The discover was testing a | non-updated version of NAV 2002 which was vulnerable to this and other | non-RFC compliant configurations. Updated and current releases are not | vulnerable to this problem | | http://securityresponse.symantec.com/avcenter/security/Content/2002.04.03.html | is the posted response to this issue.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
24972 4877 CVE-2002-0485 BUGTRAQ:20020322 One more way to bypass NAV  View
24973 4877 CVE-2002-0485 URL:http://marc.info/?l=bugtraq&m=101684260510079&w=2  View
24974 4877 CVE-2002-0485 VULN-DEV:20020322 One more way to bypass NAV  View

Related JVN