5

CVE-2006-0232

Exploit
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Symantec ≫ Antivirus Scan Engine Version5.0.0.24
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.4% 0.819
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/19734
http://www.securityfocus.com/archive/1/431734/100/0/threaded
http://www.securityfocus.com/bid/17637
http://www.symantec.com/avcenter/security/Content/2006.04.21.html
http://www.vupen.com/english/advisories/2006/1464
http://securitytracker.com/id?1015974
http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0012.html
Patch
Vendor Advisory
Exploit
http://securityreason.com/securityalert/758
http://securityreason.com/securityalert/759
http://www.securityfocus.com/archive/1/431728/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/25974