CVE-2006-0232

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.40%

Published

Apr 25, 2006

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests.

Affected Products (1)

symantec · antivirus_scan_enginevulnerable

References (20)

http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0012.html

ExploitPatchVendor Advisory

http://secunia.com/advisories/19734

http://securityreason.com/securityalert/758

http://securityreason.com/securityalert/759

http://securitytracker.com/id?1015974

http://www.securityfocus.com/archive/1/431728/100/0/threaded

http://www.securityfocus.com/archive/1/431734/100/0/threaded

http://www.securityfocus.com/bid/17637