Unscored severity · published Jun 17, 2000
CVE-2000-0541
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command
–
CVSS
0.7%
EPSS
No
On KEV
Description
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Panda Antivirus · Panda
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0541
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0541
Exploit
http://archives.neohapsis.com/archives/bugtraq/2000-06/0164.html
Exploit
http://www.securityfocus.com/bid/1359
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/4707
More from Panda Antivirus
–
CVE-2007-4191
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by…
–
CVE-2007-3969
Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an "Integer Cast Around."
–
CVE-2007-1673
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry…
–
CVE-2007-1670
Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous…
–
CVE-2005-3922
Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive