CVE-2001-1099 Information disclosure in n/a

What is CVE-2001-1099?

CVE-2001-1099 is a medium-severity vulnerability in Symantec Norton Antivirus, published on 25 Jun 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.

Weakness: CWE-434

Which versions are affected by CVE-2001-1099?

It affects 1 product.

Products include Symantec Norton Antivirus.

How do I fix CVE-2001-1099?

No fix has been published for CVE-2001-1099 yet. Limit exposure of the affected software until one is available.

Is CVE-2001-1099 being exploited?

There is no known exploitation of CVE-2001-1099 in the wild and no public exploit code.

Other vulnerabilities in Symantec Norton Antivirus

• CVE-2005-2017 Privilege escalation in n/a Critical 10.0
• CVE-2004-0487 Other in n/a Critical 10.0
• CVE-2006-3456 Code injection in n/a High 8.5
• CVE-2002-2206 Denial of service in n/a High 7.8
• CVE-2002-1774 Security feature bypass in n/a High 7.5

All Symantec Norton Antivirus vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-736q-94f7-6gfq.