Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-0230. PoCs published by Marc Bevand.
AI-analyzed exploit summary This exploit changes the administrator password (or password hash) of Symantec Scan Engine by leveraging an authentication bypass vulnerability. It communicates with the target via HTTP and SSL to retrieve the current password hash and set a new one.
Description
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privileges via a modified client that sends certain XML requests.
Exploits (1)
This exploit changes the administrator password (or password hash) of Symantec Scan Engine by leveraging an authentication bypass vulnerability. It communicates with the target via HTTP and SSL to retrieve the current password hash and set a new one.