CVE-1999-0842

Medium

Published: 29/11/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.47%

94th percentile - higher than 94% of all known CVEs

The web interface server of Symantec Mail-Gear 1.0 allows remote users to read arbitrary files via a .. (dot dot) attack.

An attacker could gain access to sensitive data, potentially leading to a breach of information security within the organization.

It is recommended to update the software to the latest version and implement appropriate security measures to block dot dot attacks.

Original NVD description (English source)

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.