{PRL} Multiple Panda Security Products Local Privilege Escalation Vulnerability

View: New views

2 Messages — Rating Filter: Alert me

{PRL} Multiple Panda Security Products Local Privilege Escalation Vulnerability

by Protek Research Lab :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

#####################################################################################

Application: Panda Global Protection 2010
    Panda Internet Security 2010

Platforms: Windows XP Professional SP & windows Vista SP1

Exploitation: Local Privilege Escalation

Date:    2009-10-27

Author:    Francis Provencher (Protek Research Lab's)

#####################################################################################

1) Introduction
2) Technical details
3) The Code (N/A)

#####################################################################################

===============
1) Introduction
===============

Panda Global Protection 2010
Enjoy total security and ensure information integrity.

Enjoy optimum security and safeguard your valuable data with Panda Global Protection 2010. It protects you from viruses, spyware,

rootkits, hackers, online fraud, identity theft and all other Internet threats. The anti-spam engine will keep your inbox free from

junk mail while the Parental Control feature ensures your children can use the Web safely. You can also back up important files

(documents, music, photos, etc.) to a CD/DVD or online and restore them in case of accidental loss or damage.

(from Panda security website)

2009-10-27 Contact vendor (No response)
2009-10-29 Contact vendor (No response)
2009-10-30 Contact Vendor (Three strikes...out!)

#####################################################################################

============================
2) Technical details
============================

Panda Global Protection 2010
Build 3.01.00

Panda Internet Security 2010
Build 15.01.00

All files under the install folder have Full control access for everyone and can be replace with malicious files.

... snip ...

C:\Program Files\Panda Security\Panda Global Protection 2010\PavFnSvr.exe Everyone:F

... snip ...

C:\>WHOAMI.EXE
FUZZYXP\test

C:\>telnet 127.0.0.1 4444

C:\>WHOAMI.EXE
WHOAMI.EXE
AUTORITE NT\SYSTEM

#####################################################################################

===========
3) The Code
===========

N\A

#####################################################################################
(PRL-2009-15)

__________________________________________________________________
Looking for the perfect gift? Give the gift of Flickr!

http://www.flickr.com/gift/

Re: {PRL} Multiple Panda Security Products Local Privilege Escalation Vulnerability

by Vladimir '3APA3A' Dubrovin :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Dear Protek Research Lab,

I have a deja-vu. http://securityvulns.ru/Odocument175.html Same problem
existed since 2006. With same reaction (total ignorance) from Panda
developers.

--Saturday, October 31, 2009, 5:24:38 PM, you wrote to bugtraq@...:

PRL> #####################################################################################

PRL> Application: Panda Global Protection 2010
PRL>     Panda Internet Security 2010

PRL> Platforms: Windows XP Professional SP & windows Vista SP1

PRL> Exploitation: Local Privilege Escalation

PRL> Date:    2009-10-27

PRL> Author:    Francis Provencher (Protek Research Lab's)

PRL>
PRL> #####################################################################################

PRL> 1) Introduction
PRL> 2) Technical details
PRL> 3) The Code (N/A)

PRL> #####################################################################################

PRL> ===============
PRL> 1) Introduction
PRL> ===============

PRL> Panda Global Protection 2010
PRL> Enjoy total security and ensure information integrity.

PRL> Enjoy optimum security and safeguard your valuable data with
PRL> Panda Global Protection 2010. It protects you from viruses,
PRL> spyware,

PRL> rootkits, hackers, online fraud, identity theft and all other
PRL> Internet threats. The anti-spam engine will keep your inbox free
PRL> from

PRL> junk mail while the Parental Control feature ensures your
PRL> children can use the Web safely. You can also back up important
PRL> files

PRL> (documents, music, photos, etc.) to a CD/DVD or online and
PRL> restore them in case of accidental loss or damage.

PRL> (from Panda security website)

PRL> 2009-10-27 Contact vendor (No response)
PRL> 2009-10-29 Contact vendor (No response)
PRL> 2009-10-30 Contact Vendor (Three strikes...out!)

PRL> #####################################################################################

PRL> ============================
PRL> 2) Technical details
PRL> ============================

PRL> Panda Global Protection 2010
PRL> Build 3.01.00

PRL> Panda Internet Security 2010
PRL> Build 15.01.00

PRL> All files under the install folder have Full control access
PRL> for everyone and can be replace with malicious files.

PRL> ... snip ...

PRL> C:\Program Files\Panda Security\Panda Global Protection 2010\PavFnSvr.exe Everyone:F

PRL> ... snip ...

C:\>>WHOAMI.EXE
PRL> FUZZYXP\test

C:\>>telnet 127.0.0.1 4444

C:\>>WHOAMI.EXE
PRL> WHOAMI.EXE
PRL> AUTORITE NT\SYSTEM

PRL> #####################################################################################

PRL> ===========
PRL> 3) The Code
PRL> ===========

PRL> N\A

PRL> #####################################################################################
PRL> (PRL-2009-15)

PRL>
PRL> __________________________________________________________________
PRL> Looking for the perfect gift? Give the gift of Flickr!

PRL> http://www.flickr.com/gift/

--
Skype: Vladimir.Dubrovin
~/ZARAZA http://securityvulns.com/
Èáî ôàêòû åñòü ôàêòû, è èçëîæåíû îíè ëèøü äëÿ òîãî, ÷òîáû èõ ïîíÿëè è â íèõ ïîâåðèëè. (Òâåí)