Memory corruption

Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785...

CVE-2007-2619

Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785...

CVE-2007-2619

CVE-2007-2619 affects Symantec pcAnywhere 11.5.x and 12.0.x, where unencrypted login credentials can reside in process memory. The description indicates local administrators can read memory to retrieve credentials, making this a local access issue. No explicit exploit details or mitigation are pr...

CVE-2007-2619

Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785...

CVE-2007-2619: Undefined Security Weakness

Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785...

Symantec pcAnywhere Remote User Credential Disclosure

SUMMARY Symantec pcAnywhere fails to properly protect remote user credentials stored in memory. Risk Impact Low Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Products | Versions ---|--- Symantec pcAnywhere | 11.5.x No...

PCAnywhere CIF文件本地权限提升漏洞

Symantec PCAnywhere是全球最畅销的用于管理服务器和提供管理人员支持的远程控制解决方案。 PCAnywhere的CIF文件可能包含有超级用户标签，而这个文件默认下不安全的存储在了“Documents and Settings\All Users\Application Data\Symantec\pcAnywhere\Hosts\”，导致任何用户都可以读取文件内容并创建新文件。 攻击者可以创建新的CIF文件，设置超级用户标签，并将其放置在Hosts目录中，这样用户登录到PCAnywhere时就会获得管理员权限。 Symantec pcAnywhere 12.5...

CVE-2006-4855

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1,...

CVE-2006-4855: Undefined Security Weakness

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1,...

pcAnywhere认证拒绝服务漏洞

BUGTRAQ ID: 15646 CVECAN ID: CVE-2005-3934 Symantec pcAnywhere是全球最畅销的用于管理服务器和提供管理人员支持的远程控制解决方案。 pcAnywhere在处理特制消息的时候存在溢出漏洞，可能导致拒绝服务。由于溢出发生在认证之前，因此远程攻击者无需有效的凭据便可利用这个漏洞。 Symantec pcAnywhere 11.5.1 Symantec pcAnywhere 11.0.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-3784

Symantec pcAnywhere 12.5 uses weak default permissions for the "Symantec\pcAnywhere\Hosts" folder, which allows local users to gain privileges by inserting a superuser .cif aka caller or CallerID file into the folder, and then using a pcAnywhere client to login as a local administrator...

CVE-2006-3785

Symantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not encrypt them in the associated .cif aka caller or CallerID file, which allows local users to obtain the passwords from the window using tools such as Nirsoft Asterwin...

CVE-2006-3786

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif aka caller or CallerID files, which allows local users to generate a custom .cif file and modify the superuser flag...

CVE-2006-3785

CVE-2006-3785 Affected software: Symantec pcAnywhere 12.5. Vulnerability: Passwords in the GUI are obfuscated but not encrypted in the associated .cif (CallerID) file. This allows local users to extract passwords from the CIF/file using tools such as Nirsoft Asterwin. Impact: Local access is requ...

CVE-2006-3786

Symantec pcAnywhere 12.5 is affected by CVE-2006-3786 due to weak integrity protection for .cif (CallerID) files, enabling local users to craft a custom .cif file and modify the superuser flag. The concrete impact is local privilege manipulation. Exploitation status is not provided in the connect...

CVE-2006-3786

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif aka caller or CallerID files, which allows local users to generate a custom .cif file and modify the superuser flag...

CVE-2006-3784

CVE-2006-3784 affects Symantec pcAnywhere 12.5. The vulnerability arises from weak default permissions on the "/Symantec\pcAnywhere\Hosts" folder, enabling local users to gain privileges by placing a superuser .cif (CallerID) file in that folder and then logging in with a pcAnywhere client as a l...

CVE-2006-3785

Symantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not encrypt them in the associated .cif aka caller or CallerID file, which allows local users to obtain the passwords from the window using tools such as Nirsoft Asterwin...

CVE-2006-3784

Symantec pcAnywhere 12.5 uses weak default permissions for the "Symantec\pcAnywhere\Hosts" folder, which allows local users to gain privileges by inserting a superuser .cif aka caller or CallerID file into the folder, and then using a pcAnywhere client to login as a local administrator...

CVE-2006-3786: Undefined Security Weakness

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif aka caller or CallerID files, which allows local users to generate a custom .cif file and modify the superuser flag...