Vulnerability CVE-2006-5966
Published: 2006-11-17   Modified: 2012-02-12

Description:
Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or (2) determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control.

Type:

CWE-399

 (Resource Management Errors)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.4/10
4.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
Partial
Affected software
Panda -> Activescan 

 References:
http://www.securityfocus.com/archive/1/451864/100/0/threaded
http://www.securityfocus.com/bid/21132
http://www.vupen.com/english/advisories/2006/4536
https://exchange.xforce.ibmcloud.com/vulnerabilities/30317
https://exchange.xforce.ibmcloud.com/vulnerabilities/30318
Copyright 2024, cxsecurity.com

 

Back to Top