5

CVE-2006-0232

Exploit

EPSS 0.88%
Veröffentlicht 25.04.2006 01:02:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 14

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Symantec ≫ Antivirus Scan Engine Version5.0.0.24

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.88%	0.744

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://secunia.com/advisories/19734

http://www.securityfocus.com/archive/1/431734/100/0/threaded

http://www.securityfocus.com/bid/17637

http://www.symantec.com/avcenter/security/Content/2006.04.21.html

http://www.vupen.com/english/advisories/2006/1464

http://securitytracker.com/id?1015974

http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0012.html

Patch

Vendor Advisory

Exploit

http://securityreason.com/securityalert/758

http://securityreason.com/securityalert/759

http://www.securityfocus.com/archive/1/431728/100/0/threaded

https://exchange.xforce.ibmcloud.com/vulnerabilities/25974

https://nvd.nist.gov/vuln/detail/CVE-2006-0232

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-0232

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-0232

EUVD