PT-2007-4319 · Panda · Panda Adminsecure

Published 2007-07-25 · Updated 2018-10-16 · CVE-2007-3026

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Panda Software AdminSecure (affected versions not specified)

Description: The issue is related to an integer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending crafted packets with modified length values to TCP ports 19226 or 19227, resulting in a heap-based buffer overflow.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-3026

Affected Products

Panda Adminsecure

References · 10

• http://secunia.com/advisories/26157 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3026 · Security Note
• http://securitytracker.com/id?1018446 · Note
• http://securityreason.com/securityalert/2917 · Note
• http://vupen.com/english/advisories/2007/2641 · Note
• http://securityfocus.com/archive/1/474551/100/0/threaded · Note
• http://securityfocus.com/bid/25046 · Note
• http://osvdb.org/38614 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35600 · Note
• http://zerodayinitiative.com/advisories/ZDI-07-041.html · Note