Infosec.20000617.panda.a

`Infosec Security Vulnerability Report  
No: Infosec.20000617.panda.a  
============================  
  
Vulnerability Summary  
---------------------  
Problem: Panda Antivirus has an open console at port 2001  
  
Threat: Remotely run any command on a Netware console  
  
Platform: Confirmed on Novell Netware  
  
Solution: The fix is included on the June version of the GVI disk  
  
  
Vulnerability Description  
-------------------------  
Customers to Panda Antivirus may have a Panda Antivirus console open on port  
2001. This Panda console is open to everyone who has access to this port. You  
are not prompted for authentication.  
Example:  
  
foo:/# nc server 2001  
  
Panda Antivirus NetWare Servers  
Copyright 1998(c) Panda Software  
Version 2.00  
Last upgrade: 10/04/2000  
  
FS1 (#1): help  
ANALYZE CMD HELP LOAD  
RELOADCFG UPDATE UNLOAD VER  
FS1 (#1): help cmd  
Make a console command of Netware  
CMD [Command NetWare]  
Example: CMD LOAD MONITOR  
  
  
Any Netware command can be executed with the CMD command (i.e. unloading and  
loading REMOTE.NLM with a password of your choice.)  
  
Solution  
--------  
PCM International says that they have fixed the hole on the June version of the  
GVI disk (labeled M6/A00)  
  
Additional Information  
----------------------  
Only the Netware version has been confirmed. Infosec have not had the  
opportunity to test the Windows version of Panda Antivirus.  
  
//Ian Vitek  
[email protected]  
  
-------------------------------  
Infosec is a Swedish based tiger team that has worked with computer-related  
security since 1982 and done network penetration tests and technical audits  
since 1996. Infosec welcomes its newcomers David, Rikard and Anders. Infosec is  
now hiring in Sweden and the United Kingdom. Call Christer Stafferod on  
+46-(0)8-6621070 ( mailto:[email protected] ) for more information.  
  
`