CVE Vulnerabilities

CVE-2006-0231

Published: Apr 25, 2006 | Modified: Oct 19, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct man-in-the-middle attacks and decrypt communications.

Affected Software

Name Vendor Start Version End Version
Antivirus_scan_engine Symantec 5.0.0.24 (including) 5.0.0.24 (including)

References