NVD

Id
58972  
Name
CVE-2006-0232  
Description
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-04-24  
Modified Date
2011-03-07  
Seq
2006-0232  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302869 58972 CVE-2006-0232 20060421 Rapid7 Advisory R7-0023: Symantec Scan Engine File Disclosure Vulnerability  View
302870 58972 CVE-2006-0232 758  View
302871 58972 CVE-2006-0232 759  View
302872 58972 CVE-2006-0232 1015974  View
302873 58972 CVE-2006-0232 20060421 Rapid7 Advisory R7-0023: Symantec Scan Engine File Disclosure Vulnerability  View
302874 58972 CVE-2006-0232 20060421 [Symantec Security Advisor] Symantec Scan Engine Multiple Vulnerabilities  View
302875 58972 CVE-2006-0232 17637  View
302876 58972 CVE-2006-0232 http://www.symantec.com/avcenter/security/Content/2006.04.21.html  View
302877 58972 CVE-2006-0232 ADV-2006-1464  View
302878 58972 CVE-2006-0232 sse-unauth-file-access(25974)  View

Related JVN