OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
RE: Re[2]: [Full-disclosure] Panda Antivirus 2008 Local Privileg Escalation (UPS they did it again)

From: Panda Security Response (securepandasecurity.com)
Date: Mon Sep 24 2007 - 02:48:19 CDT


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> -----Original message-----
> From: 3APA3A [mailto:3APA3ASECURITY.NNOV.RU]
>
> securepandasoftware.com was contacted about this same
> vulnerability in Panda Antivirus 2007 on August, 11 2006
> (more than year ago) without any results and response, until
> information was published in Bugtraq.

The vulnerability response team was created in 10/2006 to manage
vulnerability reports and create fixes as necessary.

> As far, as I can see, pandasecurity.com is Swedish
> domain of Panda while pandasoftware.com is international
> one. I believe it's quite reasonable to have
> securepandasoftware.com to be forwarded to
> securepandasecurity.com, don't you think so?

Re: securepandasoftware.com & securepandasecurity.com, it's the
same contact mailbox at the Panda HQ domain in Spain (.es), not
Sweden (.se). Public key attached.

Regards,

- ----------------------------------------------
Pedro Bustamante
Senior Research Advisor
Panda Security

email: pedro.bustamantepandasecurity.com <0xC684A6F9>
vulns: securepandasecurity.com <0x70F3FEA0>
phone: (+34) 91-8063700
blog: http://research.pandasoftware.com
- ----------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQA/AwUBRvdrw46s6aZw8/6gEQJ+bACfWyLJHFMarDWRU1h/sbD7xttIUmkAoO2W
lMvAKwSZDMPuCx7yCnEFnQ+y
=wLME
-----END PGP SIGNATURE-----