CVE-2006-0231: Symantec Antivirus Scan Engine

Medium severity, CVSS 6.4. EPSS: 1.9% chance of exploitation in the next 30 days.

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct man-in-the-middle attacks and decrypt communications.

Affected products

• Symantec Antivirus Scan Engine: version 5.0.0.24 only

Published 2006-04-25. Last modified 2026-06-16.