Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Panda Antivirus 默认安装目录访问控制漏洞
Vulnerability Description
熊猫卫士是熊猫系列杀毒软件，支持对多种文件格式进行病毒分析。 熊猫卫士以不安全访问权限安装系统文件，本地攻击者可能利用此漏洞提升自己的权限，获取系统的完全控制。 在安装熊猫卫士2008时默认将安装文件夹%ProgramFiles%\Panda Security\Panda Antivirus 2008\的权限设置成了Everyone:Full Control。有些服务(如PAVSRV51.EXE)从这个文件夹以LocalSystem帐号启动，而没有对服务执行任何保护。非特权用户可以用自己的文件替换服务可执
CVSS Information
N/A
Vulnerability Type
N/A