CVE-1999-1323
MediumExploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier store the administrator password in cleartext in the navieg.ini file and the ModifyPassword registry key in NAVMSE.
Risk Assessment
Storing passwords in cleartext exposes the system to unauthorized access, which can lead to serious data security breaches.
Recommendation
It is recommended to update the software to the latest version that does not store passwords in cleartext and to implement a strong password policy.
Original NVD description (English source)
Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navieg.ini file for NAVIEG, and (2) the ModifyPassword registry key in NAVMSE.