CVE-2000-0477

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that contains long file names.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html
http://www.securityfocus.com/bid/1351Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4710
http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html
http://www.securityfocus.com/bid/1351Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4710

Timeline

Published: Jun 14, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-04785.0In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server.CVE-2000-04795.0Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.CVE-2000-04805.0Dragon telnet server allows remote attackers to cause a denial of service via a long username.CVE-2000-04815.0Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.CVE-2000-04825.0Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.CVE-2000-04837.5The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.CVE-2000-04845.0Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Excep CVE-2000-04852.1Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, ak CVE-2000-04865.0Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long len CVE-2000-04873.6The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40 CVE-2000-048810.0Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command.CVE-2000-04892.1FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair