CVE-2006-3786

2006-07-2121:00:00

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.5%

JSON

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif (aka caller or CallerID) files, which allows local users to generate a custom .cif file and modify the superuser flag.

References

securityreason.com/securityalert/1261

securitytracker.com/id?1016534

www.digitalbullets.org/?p=3

www.securityfocus.com/archive/1/440448/100/0/threaded