Lucene search

[email protected]NVD:CVE-2012-0292

HistoryMar 08, 2012 - 4:15 a.m.

CVE-2012-0292

2012-03-0804:15:02

CWE-20

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.172 Low

EPSS

Percentile

96.1%

JSON

The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.

Affected configurations

NVD

Node

symantecpcanywhereRange≤12.5sp3

symantecpcanywhereMatch10.0

symantecpcanywhereMatch10.5

symantecpcanywhereMatch11.0

symantecpcanywhereMatch11.0.1

symantecpcanywhereMatch11.5

symantecpcanywhereMatch11.5.1

symantecpcanywhereMatch12.0

symantecpcanywhereMatch12.0.1

symantecpcanywhereMatch12.0.2

symantecpcanywhereMatch12.0.3

symantecpcanywhereMatch12.1

symantecpcanywhereMatch12.5

symantecpcanywhereMatch12.5sp1

symantecpcanywhereMatch12.5sp2

symantecpcanywhereMatch12.5.3

symantecpcanywhereMatch12.5.265

symantecpcanywhereMatch12.5.539

Node

symantecaltiris_client_management_suite_pcanywhere_solutionMatch7.0

symantecaltiris_climentent_manage_suite_pcanywhere_solutionMatch7.1

symantecaltiris_deployment_solution_remote_pcanywhere_solutionMatch7.1

symantecaltiris_it_management_suite_pcanywhere_solutionMatch7.0

symantecaltiris_it_management_suite_pcanywhere_solutionMatch7.1

References

secunia.com/advisories/48092

www.exploit-db.com/exploits/18493/

www.securityfocus.com/bid/52094

www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120301_00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.172 Low

EPSS

Percentile

96.1%

JSON

Related for NVD:CVE-2012-0292

cve1 prion1 nessus1 symantec1 cvelist1 kaspersky1 openvas1