« Volver al listado

CVE-2006-3457

Estado: ModificadaBaja (2.1)—

Symantec On-Demand Agent (SODA) anterior a 2.5 MR2 Build 2157, y el módulo Virtual Desktop en Symantec On-Demand Protection (SODP) anterior 2.6 Build 2233, no encripta de forma adecuada archivos que estén sujetos a la política de encriptación automática, lo cual permitiría a un usuario local leer datos sensible a través de un metodo de desencriptación no especificado.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Symantec — On-demand AgentSymantec — On-demand Protection

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-3457",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-08-05T00:04:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/21280",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1016619",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/441850/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/19248",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.symantec.com/avcenter/security/Content/2006.08.01a.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3097",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28181",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/21280",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1016619",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/441850/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/19248",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.symantec.com/avcenter/security/Content/2006.08.01a.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3097",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28181",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Symantec On-Demand Agent (SODA) before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection (SODP) before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an unspecified decryption method."
    },
    {
      "lang": "es",
      "value": "Symantec On-Demand Agent (SODA) anterior a 2.5 MR2 Build 2157, y el módulo Virtual Desktop en Symantec On-Demand Protection (SODP) anterior 2.6 Build 2233, no encripta de forma adecuada archivos que estén sujetos a la política de encriptación automática, lo cual permitiría a un usuario local leer datos sensible a través de un metodo de desencriptación no especificado."
    }
  ],
  "lastModified": "2026-06-16T22:27:05.817",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:symantec:on-demand_agent:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A7E6EA1-C9A9-4342-8E10-6D90F504C6BE",
              "versionEndIncluding": "2.5_mr2_build_2156"
            },
            {
              "criteria": "cpe:2.3:a:symantec:on-demand_protection:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBAED8BE-C5B7-4E5A-AB4D-7E525D342E30",
              "versionEndIncluding": "2.6_build_2232"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}