CVE-1999-1323

CVSS 2.0 Score 4.6 of 10 (medium)

Details

Published Apr 9, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-1323 is a vulnerability affecting earlier versions of Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and Norton AntiVirus for MS Exchange (NAVMSE) 1.5. This issue arises from both products storing the administrator password in cleartext, posing a significant risk to security. In the case of NAVIEG, this password is stored in the navieg.ini file, while for NAVMSE, it is located in the ModifyPassword registry key. An attacker who gains unauthorized access to these systems can easily obtain the password and potentially compromise the entire network. It is crucial that affected organizations take immediate steps to update their software to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Symantec Antivirus

Affected Vendors

  • Symantec