彙總 network_associates 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
常見弱點模式包括 緩衝區溢位、路徑處理缺陷與拒絕服務，在 生產負載與軟體部署 使用場景中可能帶來 應用程式崩潰與記憶體損壞 等風險。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2005-2554 | The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory. | [email protected] | 2.1 | 0.48% | 2005-08-12 | 2026-06-16 |
| CVE-2002-2224 | Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload. | [email protected] | 5.1 | 3.02% | 2002-12-31 | 2026-06-16 |
| CVE-2002-1121 | SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial | [email protected] | 7.5 | 6.67% | 2002-09-24 | 2026-06-16 |
| CVE-2001-1542 | NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments. | [email protected] | 7.5 | 2.82% | 2001-12-31 | 2026-06-16 |
| CVE-2001-1456 | Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message. | [email protected] | 7.5 | 5.65% | 2001-09-04 | 2026-06-16 |
| CVE-2000-1160 | NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests. | [email protected] | 5.0 | 1.33% | 2001-01-09 | 2026-06-16 |
| CVE-2000-1159 | NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands. | [email protected] | 7.5 | 1.55% | 2001-01-09 | 2026-06-16 |
| CVE-2000-1158 | NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords. | [email protected] | 7.5 | 1.31% | 2001-01-09 | 2026-06-16 |
| CVE-2000-1157 | Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name. | [email protected] | 10.0 | 3.48% | 2001-01-09 | 2026-06-16 |
| CVE-2000-1130 | McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment. | [email protected] | 7.5 | 1.51% | 2001-01-09 | 2026-06-16 |
| CVE-2000-1129 | McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field. | [email protected] | 5.0 | 2.48% | 2001-01-09 | 2026-06-16 |
| CVE-2000-0741 | Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension. | [email protected] | 7.5 | 5.20% | 2000-10-20 | 2026-06-16 |
| CVE-2000-0740 | Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port. | [email protected] | 5.0 | 4.69% | 2000-10-20 | 2026-06-16 |
| CVE-2000-0739 | Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server. | [email protected] | 5.0 | 2.87% | 2000-10-20 | 2026-06-16 |
| CVE-2000-0738 | WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the end, which causes WebShield to continuously send itself copies of the e-mail. | [email protected] | 5.0 | 1.74% | 2000-10-20 | 2026-06-16 |
| CVE-2000-0650 | The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse. | [email protected] | 2.1 | 0.44% | 2000-07-11 | 2026-06-16 |
| CVE-2000-0529 | Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request. | [email protected] | 5.0 | 1.68% | 2000-06-19 | 2026-06-16 |
| CVE-2000-0528 | Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files. | [email protected] | 5.0 | 1.62% | 2000-06-19 | 2026-06-16 |
| CVE-2000-0437 | Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands. | [email protected] | 10.0 | 5.86% | 2000-05-18 | 2026-06-16 |
| CVE-2000-0448 | The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GET_CONFIG command. | [email protected] | 5.0 | 2.36% | 2000-05-01 | 2026-06-16 |