Vulnerabilities > Unrestricted Upload of File with Dangerous Type

DATE CVE VULNERABILITY TITLE RISK
2001-09-07 CVE-2001-1099 Unrestricted Upload of File With Dangerous Type vulnerability in Symantec Norton Antivirus 2.5
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
network
low complexity
symantec microsoft CWE-434
5.0
2001-07-21 CVE-2001-0340 Unrestricted Upload of File With Dangerous Type vulnerability in Microsoft Exchange Server 2000/5.5
An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically.
network
low complexity
microsoft CWE-434
7.5