Unscored severity · published Nov 17, 2006
CVE-2006-5966
Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control,…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or (2) determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Activescan · Panda
5.0; 5.53.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5966
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5966
Vendor Advisory
http://secunia.com/advisories/21763
Patch
http://secunia.com/secunia_research/2006-64/advisory/
www.securityfocus.com
http://www.securityfocus.com/archive/1/451864/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/21132
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4536
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30317
More from Activescan
–
CVE-2006-5967
Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors…
–
CVE-2004-1904
Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string
–
CVE-2004-1905
ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSitesFile function