high7.8Public exploit code
CVE-2015-7378
Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and installed files, which allows local users to g…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Panda Security URL Filtering < 4.3.1.9 - Local Privilege Escalation2016-04-06 · local · windows
Impact
Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and installed files, which allows local users to gain SYSTEM privileges by modifying Panda_URL_Filteringb.exe.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Watchguard | Panda Url Filtering | through 4.3.1.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/136607/Panda-Security-URL-Filtering-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2016/Apr/25
- https://www.exploit-db.com/exploits/39670/
- http://packetstormsecurity.com/files/136607/Panda-Security-URL-Filtering-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2016/Apr/25
- https://www.exploit-db.com/exploits/39670/