CVE-2011-3479

2012-01-2515:55:01

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

20.7%

JSON

Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file.

Affected configurations

Nvd

Node

symantecpcanywhereMatch12.5

symantecpcanywhereMatch12.5sp1

symantecpcanywhereMatch12.5sp2

symantecpcanywhereMatch12.5sp3

symantecpcanywhereMatch12.5.539

symantecpcanywhereMatch12.6.65

symantecpcanywhereMatch12.6.65sp1

symantecpcanywhereMatch12.6.7580

VendorProductVersionCPE
symantecpcanywhere12.5cpe:2.3:a:symantec:pcanywhere:12.5:*:*:*:*:*:*:*
symantecpcanywhere12.5cpe:2.3:a:symantec:pcanywhere:12.5:sp1:*:*:*:*:*:*
symantecpcanywhere12.5cpe:2.3:a:symantec:pcanywhere:12.5:sp2:*:*:*:*:*:*
symantecpcanywhere12.5cpe:2.3:a:symantec:pcanywhere:12.5:sp3:*:*:*:*:*:*
symantecpcanywhere12.5.539cpe:2.3:a:symantec:pcanywhere:12.5.539:*:*:*:*:*:*:*
symantecpcanywhere12.6.65cpe:2.3:a:symantec:pcanywhere:12.6.65:*:*:*:*:*:*:*
symantecpcanywhere12.6.65cpe:2.3:a:symantec:pcanywhere:12.6.65:sp1:*:*:*:*:*:*
symantecpcanywhere12.6.7580cpe:2.3:a:symantec:pcanywhere:12.6.7580:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	pcanywhere	12.5	cpe:2.3:a:symantec:pcanywhere:12.5:::::::*
symantec	pcanywhere	12.5	cpe:2.3:a:symantec:pcanywhere:12.5:sp1::::::
symantec	pcanywhere	12.5	cpe:2.3:a:symantec:pcanywhere:12.5:sp2::::::
symantec	pcanywhere	12.5	cpe:2.3:a:symantec:pcanywhere:12.5:sp3::::::
symantec	pcanywhere	12.5.539	cpe:2.3:a:symantec:pcanywhere:12.5.539:::::::*
symantec	pcanywhere	12.6.65	cpe:2.3:a:symantec:pcanywhere:12.6.65:::::::*
symantec	pcanywhere	12.6.65	cpe:2.3:a:symantec:pcanywhere:12.6.65:sp1::::::
symantec	pcanywhere	12.6.7580	cpe:2.3:a:symantec:pcanywhere:12.6.7580:::::::*