CVE-2006-4657

Published: Sep 9, 2006Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying (1) WebProxy.exe or (2) PAVSRV51.EXE.

Affected (2)

Products: Panda: Panda Platinum Internet Security

1 product

Panda Platinum Internet Security

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Panda Panda Platinum Internet Security	Version 2006_10.02.01
Panda Panda Platinum Internet Security	Version 2007_11.00.00

References (14)

http://secunia.com/advisories/21769

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1524

Source: cve@mitre.org

http://www.security.nnov.ru/advisories/pandais.asp

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/445479/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/445889/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19891

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3514

Source: cve@mitre.org

http://secunia.com/advisories/21769

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/1524

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.security.nnov.ru/advisories/pandais.asp

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/445479/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/445889/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19891

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3514

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.