CVE-2006-0232

N/A Unknown
Published: April 25, 2006 Modified: April 16, 2026
View on NVD

Description

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0012.html
Source: cve@mitre.org
Exploit Patch Vendor Advisory
http://secunia.com/advisories/19734
Source: cve@mitre.org
http://securityreason.com/securityalert/758
Source: cve@mitre.org
http://securityreason.com/securityalert/759
Source: cve@mitre.org
http://securitytracker.com/id?1015974
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/431728/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/431734/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/17637
Source: cve@mitre.org
http://www.symantec.com/avcenter/security/Content/2006.04.21.html
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2006/1464
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/25974
Source: cve@mitre.org
http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0012.html
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit Patch Vendor Advisory
http://secunia.com/advisories/19734
Source: af854a3a-2127-422b-91ae-364da2661108
http://securityreason.com/securityalert/758
Source: af854a3a-2127-422b-91ae-364da2661108
http://securityreason.com/securityalert/759
Source: af854a3a-2127-422b-91ae-364da2661108
http://securitytracker.com/id?1015974
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/431728/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/431734/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/17637
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.symantec.com/avcenter/security/Content/2006.04.21.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2006/1464
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/25974
Source: af854a3a-2127-422b-91ae-364da2661108

22 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.9%
75th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

symantec