Security readout for executives and security teams
A flaw in Norton Antivirus for Exchange (NavExchange) let a remote sender crash the scanner by mailing a .zip archive containing files with very long names. The impact was denial of service against the mail antivirus component, disrupting inbound mail scanning on affected Exchange servers. This is a legacy 2000-era issue with limited relevance to modern environments unless unsupported systems remain in service. Exposure is limited to organizations still operating Norton Antivirus for Exchange from the 2000 era on legacy Exchange servers. Modern Exchange, Microsoft Defender, and current Symantec/Broadcom mail products are not the same code path. No CPE or version data is provided in the bundle, so precise inventory matching from the CVE record alone is not feasible. Low priority for modern environments. Only material if legacy Exchange with Norton Antivirus for Exchange is still in production, in which case the underlying platform lifecycle risk far exceeds this single CVE. Fold remediation into planned decommissioning of end-of-life mail infrastructure. Mitigation focus: Retire or upgrade any remaining Norton Antivirus for Exchange installations to a currently supported mail security product.; Consult current Symantec/Broadcom guidance for successor products and any historical patch information.; Enforce attachment scanning and archive inspection limits on the modern mail gateway to reject malformed archives..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2000-0477 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- antivirus-nav-zip-bo(4710)CVE reference · vdb-entry, x_refsource_XF
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.