CVE-2002-0485

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-178

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=101684260510079&w=2Mailing List
http://marc.info/?l=vuln-dev&m=101681724810317&w=2Mailing List
http://marc.info/?l=bugtraq&m=101684260510079&w=2Mailing List
http://marc.info/?l=vuln-dev&m=101681724810317&w=2Mailing List

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-04867.2Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the c CVE-2002-04874.6Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local u CVE-2002-048810.0Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host CVE-2002-048910.0Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in CVE-2002-049010.0Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands v CVE-2002-049110.0admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remo CVE-2002-04925.0dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.CVE-2002-04937.5Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow at CVE-2002-04947.5Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access CVE-2002-049510.0csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup para CVE-2002-04965.0The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) via a malformed URL to CVE-2002-04972.1Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS enviro