Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0923
symantec
norton
antivirus
smartscan
dos vulnerability
cve-2005-0923
cpu consumption
system crash
network share
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.9%
The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share.
Affected configurations
Node
symantecnorton_antivirusMatch2.1ms_exchange
ORsymantecnorton_antivirusMatch2005
ORsymantecnorton_internet_securityMatch2004professional
ORsymantecnorton_internet_securityMatch2005
ORsymantecnorton_system_worksMatch2004_professional
ORsymantecnorton_system_worksMatch2005_premier
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.9%
Related for CVE-2005-0923