PT-2007-5386 · Panda · Panda Antivirus 2008

Publicado 2007-08-08 · Atualizado 2018-10-15 · CVE-2007-4191

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Panda Antivirus 2008

Description The issue allows local users to obtain LocalSystem privileges by modifying certain files, including PAVSRV51.EXE, due to weak permissions on service executables stored under the product's installation directory.

Recommendations For Panda Antivirus 2008, consider restricting access to the PAVSRV51.EXE file and other sensitive executables under the installation directory to prevent unauthorized modifications until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-4191

Produtos afetados

Panda Antivirus 2008

Referências · 12

• 🔥 https://exploit-db.com/exploits/4257 · Exploit
• 🔥 http://securityfocus.com/bid/25186 · Exploit
• http://pandasecurity.com/homeusers/support/card?id=41111&idIdioma=2&ref=PAV08Dev · Nota
• http://securitytracker.com/id?1018722 · Nota
• http://securityreason.com/securityalert/2968 · Nota
• http://securityfocus.com/archive/1/480443/100/100/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4191 · Nota de Segurança
• http://secunia.com/advisories/26336 · Nota
• https://tiifp.org/tarkus/advisories/panda030707.txt · Nota
• http://vupen.com/english/advisories/2007/2784 · Nota
• http://securityfocus.com/archive/1/475373/100/0/threaded · Nota
• http://securityfocus.com/archive/1/480022/100/100/threaded · Nota