Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:antivirus_scan_engine:5.0.0.24:*:*:*:*:*:*:*

part: a version: 5.0.0.24 update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductAntivirus Scan Engine (21b04a3d-f93d-5a0d-b208-a7b7737a119d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-0232 vulnerable 2026-06-08 04:48:53.173437 Details available
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests.
Published: 2006-04-25T01:00:00.000Z
Updated: 2024-08-07T16:25:34.018Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0231 vulnerable 2026-06-08 04:48:53.173066 Details available
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct man-in-the-middle attacks and decrypt communications.
Published: 2006-04-25T01:00:00.000Z
Updated: 2024-08-07T16:25:34.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0230 vulnerable 2026-06-08 04:48:53.172634 Details available
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privileges via a modified client that sends certain XML requests.
Published: 2006-04-25T01:00:00.000Z
Updated: 2024-08-07T16:25:33.986Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.