Norton AntiVirus for Internet Email Gateways Buffer Overflow Vulnerability
BID:1064
Info
Norton AntiVirus for Internet Email Gateways Buffer Overflow Vulnerability
| Bugtraq ID: | 1064 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Mar 17 2000 12:00AM |
| Updated: | Mar 17 2000 12:00AM |
| Credit: | Posted to Bugtraq on March 17, 2000 by Paul VanDyke <[email protected]>. |
| Vulnerable: |
Symantec Norton AntiVirus for Internet Email Gateways 1.0 |
| Not Vulnerable: | |
Discussion
Norton AntiVirus for Internet Email Gateways Buffer Overflow Vulnerability
Norton AntiVirus for Internet Email Gateways contains a web server for use when configuring the application after it is installed. Due to unchecked buffer code, the program will crash causing a Dr. Watson error when a URL consisting of a large number of characters is requested.
Norton AntiVirus for Internet Email Gateways contains a web server for use when configuring the application after it is installed. Due to unchecked buffer code, the program will crash causing a Dr. Watson error when a URL consisting of a large number of characters is requested.
Exploit / POC
Norton AntiVirus for Internet Email Gateways Buffer Overflow Vulnerability
see discussion
see discussion
Solution / Fix
Norton AntiVirus for Internet Email Gateways Buffer Overflow Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Norton AntiVirus for Internet Email Gateways Buffer Overflow Vulnerability
References:
References: