CVE-2006-5966: Medium severity Panda ActiveScan vulnerability

Published Nov 17, 2006

Updated

Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or (2) determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control.

Affected Software

2 affected components

Panda ActiveScan=5.0

Panda ActiveScan=5.53.00

Remediation

Patch Available

http://secunia.com/secunia_research/2006-64/advisory/

Event History

Nov 17, 2006

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Data Sourced

via NVD·10:07 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-5966?

CVE-2006-5966 is rated as a medium severity vulnerability due to its potential to allow remote attacks.

How do I fix CVE-2006-5966?

To fix CVE-2006-5966, upgrade Panda ActiveScan to version 5.54.01 or later.

What methods are exploited in CVE-2006-5966?

CVE-2006-5966 exploits the Reinicializar method to reboot the system and the ObtenerTamano method to determine file existence and size.

Which versions of Panda ActiveScan are affected by CVE-2006-5966?

Versions of Panda ActiveScan before 5.54.01, specifically 5.53.00 and 5.0, are affected by CVE-2006-5966.

Are there any known exploits for CVE-2006-5966?

Yes, remote attackers can exploit CVE-2006-5966 to reboot the system or check for file sizes.