CVE-2000-0478

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-04795.0Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.CVE-2000-04805.0Dragon telnet server allows remote attackers to cause a denial of service via a long username.CVE-2000-04815.0Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.CVE-2000-04825.0Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.CVE-2000-04837.5The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.CVE-2000-04845.0Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured ExcepCVE-2000-04852.1Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, akCVE-2000-04865.0Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long lenCVE-2000-04873.6The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40CVE-2000-048810.0Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command.CVE-2000-04892.1FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair CVE-2000-049010.0Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN r