CVEvulnerability
CVE-2006-4657
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-09-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying (1) WebProxy.exe or (2) PAVSRV51.EXE.
Affected configurations
• panda panda platinum internet security 2006 10.02.01
• panda panda platinum internet security 2007 11.00.00
References
- http://secunia.com/advisories/21769 Vendor Advisory
- http://securityreason.com/securityalert/1524 securityreason.com
- http://www.security.nnov.ru/advisories/pandais.asp Vendor Advisory
- http://www.securityfocus.com/archive/1/445479/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/445889/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19891 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3514 www.vupen.com
- http://secunia.com/advisories/21769 Vendor Advisory
- http://securityreason.com/securityalert/1524 securityreason.com
- http://www.security.nnov.ru/advisories/pandais.asp Vendor Advisory
- http://www.securityfocus.com/archive/1/445479/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/445889/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19891 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3514 www.vupen.com