Authentication Flaw in Symantec Scan Engine Allows Unauthorized Admin Access
CVE-2006-0230

Currently unrated

Key Information:

Vendor

Symantec
Status
Antivirus Scan Engine
Vendor
CVE Published:
25 April 2006

What is CVE-2006-0230?

The Symantec Scan Engine exhibits a design flaw in its authentication mechanism, where it relies on a client-side check for password validation. This vulnerability allows remote attackers to manipulate a modified client to send specific XML requests, thereby gaining unauthorized administrator privileges. Versions prior to 5.1.0.7 are particularly susceptible, highlighting the need for updates and improved security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/bid/17637
vdb-entryx_refsource_BID
http://secunia.com/advisories/19734
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/431724/100/0/threaded
mailing-listx_refsource_BUGTRAQ

EPSS Score

32% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.