← Database

CVE-2006-0230

CRITICAL CVSS: 10.0 Published: 2006-04-25 Modified: 2026-06-16

Description

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privileges via a modified client that sends certain XML requests.

Affected Platforms

Symantec Antivirus Scan Engine

Weakness Type

NVD-CWE-Other

References