bugtraq - Re: {PRL} Multiple Panda Security Products Local Privilege Escalation Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1363968630.20091102213738@SECURITY.NNOV.RU>
Date: Mon, 2 Nov 2009 21:37:38 +0300
From: "Vladimir '3APA3A' Dubrovin" <3APA3A@...URITY.NNOV.RU>
To: bugtraq@...urityfocus.com
Subject: Re: {PRL} Multiple Panda Security Products Local Privilege Escalation Vulnerability

Dear Protek Research Lab,

I have a deja-vu. http://securityvulns.ru/Odocument175.html Same problem
existed  since  2006.  With  same  reaction (total ignorance) from Panda
developers.

--Saturday, October 31, 2009, 5:24:38 PM, you wrote to bugtraq@...urityfocus.com:

PRL> #####################################################################################

PRL> Application:  Panda Global Protection 2010
PRL>           Panda Internet Security 2010                

PRL> Platforms:    Windows XP Professional SP & windows Vista SP1

PRL> Exploitation: Local Privilege Escalation

PRL> Date:         2009-10-27

PRL> Author:       Francis Provencher (Protek Research Lab's) 

PRL>           
PRL> #####################################################################################

PRL> 1) Introduction
PRL> 2) Technical details
PRL> 3) The Code (N/A)

PRL> #####################################################################################

PRL> ===============
PRL> 1) Introduction
PRL> ===============

PRL> Panda Global Protection 2010
PRL> Enjoy total security and ensure information integrity.

PRL> Enjoy optimum security and safeguard your valuable data with
PRL> Panda Global Protection 2010. It protects you from viruses,
PRL> spyware, 

PRL> rootkits, hackers, online fraud, identity theft and all other
PRL> Internet threats. The anti-spam engine will keep your inbox free
PRL> from 

PRL> junk mail while the Parental Control feature ensures your
PRL> children can use the Web safely. You can also back up important
PRL> files 

PRL> (documents, music, photos, etc.) to a CD/DVD or online and
PRL> restore them in case of accidental loss or damage. 

PRL> (from Panda security website)

PRL> 2009-10-27 Contact vendor (No response)
PRL> 2009-10-29 Contact vendor (No response)
PRL> 2009-10-30 Contact Vendor (Three strikes...out!)

PRL> #####################################################################################

PRL> ============================
PRL> 2) Technical details 
PRL> ============================

PRL> Panda Global Protection 2010
PRL> Build 3.01.00

PRL> Panda Internet Security 2010
PRL> Build 15.01.00

PRL> All files under the install folder have Full control access
PRL> for everyone and can be replace with malicious files.

PRL> ... snip ...

PRL> C:\Program Files\Panda Security\Panda Global Protection 2010\PavFnSvr.exe Everyone:F

PRL> ... snip ...

C:\>>WHOAMI.EXE
PRL> FUZZYXP\test

C:\>>telnet 127.0.0.1 4444

C:\>>WHOAMI.EXE
PRL> WHOAMI.EXE
PRL> AUTORITE NT\SYSTEM

PRL> #####################################################################################

PRL> ===========
PRL> 3) The Code
PRL> ===========

PRL> N\A

PRL> #####################################################################################
PRL> (PRL-2009-15)

PRL>      
PRL> __________________________________________________________________
PRL> Looking for the perfect gift? Give the gift of Flickr! 

PRL> http://www.flickr.com/gift/

-- 
Skype: Vladimir.Dubrovin
~/ZARAZA http://securityvulns.com/
Èáî ôàêòû åñòü ôàêòû, è èçëîæåíû îíè ëèøü äëÿ òîãî, ÷òîáû èõ ïîíÿëè è â íèõ ïîâåðèëè. (Òâåí)