5

CVE-2006-0232

Exploit

EPSS 0.88%
Veröffentlicht 25.04.2006 01:02:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 14

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Symantec ≫ Antivirus Scan Engine Version5.0.0.24

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.88%	0.744

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/19734

http://www.securityfocus.com/archive/1/431734/100/0/threaded

http://www.securityfocus.com/bid/17637

http://www.symantec.com/avcenter/security/Content/2006.04.21.html

http://www.vupen.com/english/advisories/2006/1464

http://securitytracker.com/id?1015974

http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0012.html

Patch

Vendor Advisory

Exploit

http://securityreason.com/securityalert/758

http://securityreason.com/securityalert/759

http://www.securityfocus.com/archive/1/431728/100/0/threaded

https://exchange.xforce.ibmcloud.com/vulnerabilities/25974

https://nvd.nist.gov/vuln/detail/CVE-2006-0232

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-0232

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-0232

EUVD