CVE-2002-0485

moderate-risk

Published 2002-08-12

Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients.

Do I need to act?

0.48% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Affected Products (1)

Norton Antivirus

Affected Vendors

Symantec

References (4)

Mailing List http://marc.info/?l=bugtraq&m=101684260510079&w=2

Mailing List http://marc.info/?l=vuln-dev&m=101681724810317&w=2

Mailing List http://marc.info/?l=bugtraq&m=101684260510079&w=2

Mailing List http://marc.info/?l=vuln-dev&m=101681724810317&w=2

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 2/34 · Minimal

Exposure 5/34 · Minimal