Lucene search
MitreCVE-2006-4802HistorySep 14, 2006 - 10:07 p.m.
CVE-2006-4802
2006-09-1422:07:00
mitre
web.nvd.nist.gov
25
cve-2006-4802
symantec
antivirus
format string vulnerability
security advisory
nvd
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.025
Percentile
90.1%
Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a “second format string vulnerability” as found by the vendor.
Affected configurations
Node
symantecclient_securityMatch1.0
ORsymantecclient_securityMatch1.0.1
ORsymantecclient_securityMatch1.0.1_build_8.01.434mr3
ORsymantecclient_securityMatch1.0.1_build_8.01.437
ORsymantecclient_securityMatch1.0.1_build_8.01.446mr4
ORsymantecclient_securityMatch1.0.1_build_8.01.457mr5
ORsymantecclient_securityMatch1.0.1_build_8.01.460mr6
ORsymantecclient_securityMatch1.0.1_build_8.01.464mr7
ORsymantecclient_securityMatch1.0.1_build_8.01.471mr8
ORsymantecclient_securityMatch1.1
ORsymantecclient_securityMatch1.1.1
ORsymantecclient_securityMatch1.1.1_mr1_build_8.1.1.314a
ORsymantecclient_securityMatch1.1.1_mr2_build_8.1.1.319
ORsymantecclient_securityMatch1.1.1_mr3_build_8.1.1.323
ORsymantecclient_securityMatch1.1.1_mr4_build_8.1.1.329
ORsymantecclient_securityMatch1.1.1_mr5_build_8.1.1.336
ORsymantecclient_securityMatch1.2
ORsymantecclient_securityMatch1.3
ORsymantecclient_securityMatch1.4
ORsymantecclient_securityMatch1.5
ORsymantecclient_securityMatch1.6
ORsymantecclient_securityMatch1.7
ORsymantecclient_securityMatch1.8
ORsymantecclient_securityMatch1.9
ORsymantecclient_securityMatch2.0
ORsymantecclient_securityMatch2.0.1
ORsymantecclient_securityMatch2.0.2
ORsymantecclient_securityMatch2.0.3
ORsymantecclient_securityMatch2.0.4
ORsymantecnorton_antivirusMatch8.1corporate
ORsymantecnorton_antivirusMatch8.1.1.319corporate
ORsymantecnorton_antivirusMatch8.1.1.323corporate
ORsymantecnorton_antivirusMatch8.1.1.329corporate
ORsymantecnorton_antivirusMatch8.1.1_build8.1.1.314acorporate
ORsymantecnorton_antivirusMatch9.0corporate
ORsymantecnorton_antivirusMatch9.0.1corporate
ORsymantecnorton_antivirusMatch9.0.1.1.1000corporate
ORsymantecnorton_antivirusMatch9.0.1.1000corporate
ORsymantecnorton_antivirusMatch9.0.2corporate
ORsymantecnorton_antivirusMatch9.0.4corporate
| Vendor | Product | Version | CPE |
|---|---|---|---|
| symantec | client_security | 1.0 | cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:* |
| symantec | client_security | 1.0.1 | cpe:2.3:a:symantec:client_security:1.0.1:*:*:*:*:*:*:* |
| symantec | client_security | 1.0.1_build_8.01.434 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:* |
| symantec | client_security | 1.0.1_build_8.01.437 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:* |
| symantec | client_security | 1.0.1_build_8.01.446 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:* |
| symantec | client_security | 1.0.1_build_8.01.457 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:* |
| symantec | client_security | 1.0.1_build_8.01.460 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:* |
| symantec | client_security | 1.0.1_build_8.01.464 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:* |
| symantec | client_security | 1.0.1_build_8.01.471 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:* |
| symantec | client_security | 1.1 | cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-4802
2006-09-14 22:00:00
CVE-2006-3454
2006-09-14 00:00:00
nvd
nvd
CVE-2006-4802
2006-09-14 22:07:00
CVE-2006-3454
2006-09-14 00:07:00
openvas
openvas
Debian Security Advisory DSA 1216-1 (flexbackup)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 1216-1] New flexbackup packages fix denial of service
2006-11-20 20:42:35
symantec
symantec
Symantec AntiVirus Corporate Edition Elevation of Privilege
2006-09-13 08:00:00
cve
cve
CVE-2006-3454
2006-09-14 00:07:00
securityvulns
securityvulns
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.025
Percentile
90.1%
Related for CVE-2006-4802