PT-2007-2109 · Microworld Technologies · Escan

Published 2007-05-02 · Updated 2017-07-29 · CVE-2007-0655

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MicroWorld Technologies eScan version 8.0.671.1

Description The issue allows remote or local attackers to gain privileges and execute arbitrary commands by connecting directly to TCP port 2222. This is due to a problem in the MicroWorld Agent service (MWAGENT.EXE).

Recommendations For version 8.0.671.1, consider restricting access to TCP port 2222 to minimize the risk of exploitation. As a temporary workaround, limit the functionality of the MicroWorld Agent service until a patch is available.

Fix

Related Identifiers

CVE-2007-0655

Affected Products

Escan

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-0655 · Security Note
• http://secunia.com/advisories/23809 · Vendor Advisory
• http://secunia.com/secunia_research/2007-45/advisory · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34009 · Note
• http://vupen.com/english/advisories/2007/1609 · Note
• http://securitytracker.com/id?1018007 · Note
• http://osvdb.org/35732 · Note
• http://securityfocus.com/bid/23759 · Note