RE: Re[2]: [Full-disclosure] Panda Antivirus 2008 Local Privileg Escalation (UPS they did it again)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> -----Original message-----
> From: 3APA3A [mailto:3APA3A@SECURITY.NNOV.RU]
>
> secure@pandasoftware.com was contacted about this same
> vulnerability in Panda Antivirus 2007 on August, 11 2006
> (more than year ago) without any results and response, until
> information was published in Bugtraq.

The vulnerability response team was created in 10/2006 to manage vulnerability reports and create fixes as necessary.

> As far, as I can see, pandasecurity.com is Swedish
> domain of Panda while pandasoftware.com is international
> one. I believe it's quite reasonable to have
> secure@pandasoftware.com to be forwarded to
> secure@pandasecurity.com, don't you think so?

Re: secure@pandasoftware.com & secure@pandasecurity.com, it's the same contact mailbox at the Panda HQ domain in Spain (.es), not Sweden (.se). Public key attached.

Regards,

• ---------------------------------------------- Pedro Bustamante Senior Research Advisor Panda Security

email: pedro.bustamante@pandasecurity.com <0xC684A6F9>
vulns: secure@pandasecurity.com <0x70F3FEA0>
phone: (+34) 91-8063700

- ----------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

iQA/AwUBRvdrw46s6aZw8/6gEQJ+bACfWyLJHFMarDWRU1h/sbD7xttIUmkAoO2W lMvAKwSZDMPuCx7yCnEFnQ+y
=wLME
-----END PGP SIGNATURE-----