PT-2006-5443 · Panda · Panda Platinum Internet Security

3Apa3A · Publicado 2006-09-09 · Atualizado 2018-10-17 · CVE-2006-4658

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Panda Platinum Internet Security versions 2006 10.02.01 and 2007 11.00.00

Description The issue allows remote attackers to determine mail usage patterns due to the use of sequential message numbers in generated URLs. This occurs when a user replies to a message and the sequential message numbers are not filtered.

Recommendations For Panda Platinum Internet Security 2006 10.02.01, consider disabling the feature that generates URLs with sequential message numbers until a fix is available. For Panda Platinum Internet Security 2007 11.00.00, restrict access to the mail usage patterns to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-4658

Produtos afetados

Panda Platinum Internet Security

Referências · 6

• http://securityfocus.com/bid/19891 · Nota
• http://securityreason.com/securityalert/1524 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4658 · Nota de Segurança
• http://security.nnov.ru/advisories/pandais.asp · Aviso do Fabricante
• http://securityfocus.com/archive/1/445479/100/0/threaded · Nota
• http://secunia.com/advisories/21769 · Aviso do Fabricante