Unscored severity · published Sep 9, 2006
CVE-2006-4657
Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying (1) WebProxy.exe or (2) PAVSRV51.EXE.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PP
Panda Platinum Internet Security · Panda
2006_10.02.01; 2007_11.00.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4657
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4657
Vendor Advisory
http://secunia.com/advisories/21769
securityreason.com
http://securityreason.com/securityalert/1524
Vendor Advisory
http://www.security.nnov.ru/advisories/pandais.asp
www.securityfocus.com
http://www.securityfocus.com/archive/1/445479/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/445889/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/19891
More from Panda Platinum Internet Security
–
CVE-2006-4658
Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which…
–
CVE-2006-4659
The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause…