CVE-1999-1323
CVSS 2.0 Score 4.6 of 10 (medium)
Details
Summary
CVE-1999-1323 is a vulnerability affecting earlier versions of Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and Norton AntiVirus for MS Exchange (NAVMSE) 1.5. This issue arises from both products storing the administrator password in cleartext, posing a significant risk to security. In the case of NAVIEG, this password is stored in the navieg.ini file, while for NAVMSE, it is located in the ModifyPassword registry key. An attacker who gains unauthorized access to these systems can easily obtain the password and potentially compromise the entire network. It is crucial that affected organizations take immediate steps to update their software to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Symantec Antivirus
Affected Vendors
- Symantec