Symantec Norton AntiVirus Excluded Filetype Email Protection Bypass Vulnerability

Bugtraq ID:	4245
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 07 2002 12:00AM
Updated:	Mar 07 2002 12:00AM
Credit:	Reported by Edvice Security Services <[email protected]>.
Vulnerable:	Symantec Norton AntiVirus 2002 0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional
Not Vulnerable:

Symantec Norton AntiVirus Excluded Filetype Email Protection Bypass Vulnerability

An issue has been discovered which involves Symantec Norton AntiVirus 2002 incoming email scanning protection feature.

Files renamed with either a .dbx or .nch file extension can bypass the email protection feature of Norton. This issue may allow for the execution of files, depending on their original file format.