CVE-2006-0230
HIGH 10.0EPSS 16.5%
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privileges via a modified client that sends certain XML requests.
- CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 16.47% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2006-04-25
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0010.html
- http://www.kb.cert.org/vuls/id/118388
- http://www.securityfocus.com/bid/17637