Multiple Panda Security Products Local Privilege Escalation Vulnerability

                                                #####################################################################################

Application:  Panda Global Protection 2010
          Panda Internet Security 2010                
Platforms:    Windows XP Professional SP & windows Vista SP1
Exploitation: Local Privilege Escalation
Date:         2009-10-27
Author:       Francis Provencher (Protek Research Lab's) 
          
#####################################################################################

1) Introduction
2) Technical details
3) The Code (N/A)


#####################################################################################

===============
1) Introduction
===============

Panda Global Protection 2010
Enjoy total security and ensure information integrity.

Enjoy optimum security and safeguard your valuable data with Panda Global Protection \
2010. It protects you from viruses, spyware, 

rootkits, hackers, online fraud, identity theft and all other Internet threats. The \
anti-spam engine will keep your inbox free from 

junk mail while the Parental Control feature ensures your children can use the Web \
safely. You can also back up important files 

(documents, music, photos, etc.) to a CD/DVD or online and restore them in case of \
accidental loss or damage. 

(from Panda security website)

2009-10-27 Contact vendor (No response)
2009-10-29 Contact vendor (No response)
2009-10-30 Contact Vendor (Three strikes...out!)

#####################################################################################

============================
2) Technical details 
============================

Panda Global Protection 2010
Build 3.01.00

Panda Internet Security 2010
Build 15.01.00

All files under the install folder have Full control access for everyone and can be \
replace with malicious files.

... snip ...

C:\Program Files\Panda Security\Panda Global Protection 2010\PavFnSvr.exe Everyone:F

... snip ...

C:\>WHOAMI.EXE
FUZZYXP\test

C:\>telnet 127.0.0.1 4444


C:\>WHOAMI.EXE
WHOAMI.EXE
AUTORITE NT\SYSTEM

#####################################################################################

===========
3) The Code
===========

N\A

#####################################################################################
(PRL-2009-15)
      __________________________________________________________________
Looking for the perfect gift? Give the gift of Flickr! 

http://www.flickr.com/gift/