Vulnerability in Symantec Scan Engine Affects Secure Communications

CVE-2006-0231

Summary

Symantec Scan Engine, particularly versions 5.0.0.24 and earlier, is susceptible to a vulnerability where the same private DSA key is utilized for all installations. This flaw can enable remote attackers to execute man-in-the-middle attacks, potentially allowing them to intercept and decrypt sensitive communications between affected installations. Organizations utilizing this product should take immediate action to mitigate the risks associated with this vulnerability by updating their deployments to secure versions and reconfiguring their key management practices.

References