CVE

Id
6159  
CVE No.
CVE-2002-1777  
Status
Candidate  
Description
** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension such as .nch or .dbx, but a malicious extension in the Content-Disposition field, which is used by Outlook to obtain the file name. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but Norton AntiVirus or the Office plug-in would detect the virus before it is executed.  
Phase
Assigned (20050621)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
34988 6159 CVE-2002-1777 BUGTRAQ:20020307 Various Vulnerabilities in Norton Anti-Virus 2002  View
34989 6159 CVE-2002-1777 URL:http://online.securityfocus.com/archive/1/260271  View
34990 6159 CVE-2002-1777 BUGTRAQ:20020308 Re: Edvice Security Services <support@edvicesecurity.com, 000701c1c5fb$c168f970$5a01010a@mic2000  View
34991 6159 CVE-2002-1777 URL:http://online.securityfocus.com/archive/1/260678  View
34992 6159 CVE-2002-1777 BID:4246  View
34993 6159 CVE-2002-1777 URL:http://www.securityfocus.com/bid/4246  View
34994 6159 CVE-2002-1777 XF:nav-contenttype-bypass-protection(8392)  View

Related JVN