[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Panda Security ActiveScan 2.0 (Update) Remote BOF Exploit
# Published : 2008-07-04
# Author : Karol Wiesek
# Previous Title : Safari + Quicktime <= 7.3 RTSP Content-Type Remote BOF Exploit
# Next Title : Linksys WRT54G (firmware 1.00.9) Security Bypass Vulnerabilities (2)
Author: Karol Wiesek <karol [at] wiesek {dizd0t} pl>
Homepage: http://karol.wiesek.pl/
There exists two vulnerabilities in Panda Security ActiveScan 2.0 Update function.
1) typical overflow ( this exploit )
2) Update function allows to install any ( attacker suplied ) CABinet into victims system
Panda Security have not respond in any manner, thus i have no information of any patches, plans for patching ...
* UPDATE *
Panda has patched newest version, so update will not connect to custom ( attacker supplied ) URL.
Exploit:
http://karol.wiesek.pl/files/panda.tgz
http://exploit-db.com/sploits/2008-panda.tgz
# www.Syue.com [2008-07-04]