CVE-2006-3490
Estado: ModificadaMedia (5)—
F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier does not scan files contained on removable media when "Scan network drives" is disabled, which allows remote attackers to bypass anti-virus controls.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.61%
- Percentil entre todas las CVEs puntuadas: 75
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- NVD-CWE-Other
Referencias
- http://secunia.com/advisories/20858
- http://securitytracker.com/id?1016400
- http://securitytracker.com/id?1016401
- http://www.f-secure.com/security/fsc-2006-4.shtml
- http://www.osvdb.org/26876
- http://www.securityfocus.com/bid/18693
- http://www.vupen.com/english/advisories/2006/2573
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27502
- http://secunia.com/advisories/20858
- http://securitytracker.com/id?1016400
- http://securitytracker.com/id?1016401
- http://www.f-secure.com/security/fsc-2006-4.shtml
- http://www.osvdb.org/26876
- http://www.securityfocus.com/bid/18693
- http://www.vupen.com/english/advisories/2006/2573
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27502
JSON original (NVD)
Mostrar
{
"id": "CVE-2006-3490",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-07-10T22:05:00.000",
"references": [
{
"url": "http://secunia.com/advisories/20858",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1016400",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1016401",
"source": "cve@mitre.org"
},
{
"url": "http://www.f-secure.com/security/fsc-2006-4.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/26876",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/18693",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/2573",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27502",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/20858",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1016400",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1016401",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.f-secure.com/security/fsc-2006-4.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/26876",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/18693",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/2573",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27502",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier does not scan files contained on removable media when \"Scan network drives\" is disabled, which allows remote attackers to bypass anti-virus controls."
},
{
"lang": "es",
"value": "F-Secure Anti-Virus 2003 a 2006 y otras versiones, Internet Security 2003 a 2006 y Service Platform for Service Providers 6.x y anteriores no escanean archivos ubicados en medios extraíbles cuando la opción \"Escanear Unidades de Red\" está deshabilitada, lo cual permite a atacantes remotos evitar el control de los antivirus."
}
],
"lastModified": "2026-06-16T22:27:10.540",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:workstations:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "723EB35B-5E24-4901-BDB6-D16D063F9857",
"versionEndIncluding": "5.44"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:windows_servers:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "141114BE-BDF1-45D7-A4D7-BF55172FB2E3",
"versionEndIncluding": "5.52"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:mimesweeper:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFE0DE01-2910-49C6-AF4B-5799FEB04338",
"versionEndIncluding": "5.61"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:client_security:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C8DC4C2-E570-412E-BCF8-05B65D190383",
"versionEndIncluding": "6.01"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:citrix_servers:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "095A03CE-6B8F-4275-87BE-44E807F97939"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:5.51:*:citrix_servers:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CFD7DE5-37B0-4AA9-8026-D13EFA31DDA9"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:citrix_servers:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CAB9474C-A4F9-45C0-A77C-34B794AE2262"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:2003:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "831F0C4D-C85F-46DA-BC9E-D3F56DE2B085"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F996B07-8B07-42A6-86FC-B5B55F708861"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:2005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C2C1784-2482-4CBE-BE6D-4519C3FB64BC"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A6B8424-EED8-4A09-9A9C-FC5F76A9FAF5"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_internet_security:2003:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6689D4E1-F8DC-46D9-BA35-4E4AE9C28456"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0429B86A-F228-44E8-ABBB-D57BEE3679F1"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_internet_security:2005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89A0FDD3-3364-4452-BD6F-EB6F85D3119A"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C788A5AB-C847-476C-9767-C6711F2D4EA1"
},
{
"criteria": "cpe:2.3:a:f-secure:f-secure_service_platform_for_service_providers:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A730182C-A1EC-410E-82F2-893815444638"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}