CVE-2000-0119 Security feature bypass in n/a

High 7.2 Published 8 Feb 2000 Updated 8 Aug 2024

Attackers can store malicious code in the Windows Recycle Bin undetected because default antivirus configurations exclude this folder from scanning.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2000-0119?

CVE-2000-0119 is a high-severity vulnerability in Symantec Norton Antivirus, published on 8 Feb 2000. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection.

Which versions are affected by CVE-2000-0119?

It affects 2 products.

Products include Mcafee Virusscan, Symantec Norton Antivirus.

How do I fix CVE-2000-0119?

No fix has been published for CVE-2000-0119 yet. Limit exposure of the affected software until one is available.

Is CVE-2000-0119 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2000-0119 exists.

Public exploit code: 1 Exploit-DB entry.

All Symantec Norton Antivirus vulnerabilities

Sources

Also known as GHSA-8ffx-cmw4-hwwr.