CVE-2006-0230

published 2006-04-25

CVE-2006-0230: Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

EXPLOIT

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privileges via a modified client that sends certain XML requests.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
symantec	antivirus_scan_engine	—	—

CWE-603