CVE-2006-0230: Symantec Antivirus Scan Engine

High severity, CVSS 10.0. EPSS: 16.1% chance of exploitation in the next 30 days.

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privileges via a modified client that sends certain XML requests.

Affected products

• Symantec Antivirus Scan Engine: version 5.0.0.24 only

Published 2006-04-25. Last modified 2026-06-16.