Code injection

The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, Altiris Client Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 aka...

CVE-2012-0292

The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, Altiris Client Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 aka...

CVE-2012-0292

CVE-2012-0292 affects Symantec pcAnywhere and related pcAnywhere Solution/Altiris deployments, where the awhost32 service is vulnerable to a crafted TCP session on port 5631 that causes a denial of service (daemon crash). Affected: pcAnywhere up to 12.5.3 and related Altiris pcAnywhere/Deployment...

60 Minutes Weighs Stuxnet's Legacy

The security community might understand what the Stuxnet worm did. Now the war is over what the worm means – Stuxnet’s legacy, if you will. The latest to weigh in on that question is Steve Croft, of the CBS news magazine 60 Minutes. We knew this story was coming when a 60 Minutes news crew turned...

Symantec pcAnywhere awhost32 Denial of Service (SYM12-003)

The version of Symantec pcAnywhere installed on the remote host is potentially affected by a denial of service vulnerability. Unexpected input to the awhost32 service could destabilize the service, causing it to crash. C Tenable Network Security, Inc. include'compat.inc'; if description...

Symantec pcAnywhere awhost32 Denial of Service

SUMMARY A Denial of Service DoS exploit has been publicly released that can temporarily crash the awhost32 service for Symantec pcAnywhere. AFFECTED PRODUCTS Product | Version | Build | Solution ---|---|---|--- | | | Symantec pcAnywhere | 12.5.x | All | Upgrade to the latest release of pcAnywhere...

Symantec Encryption Desktop 10 - Local Buffer Overflow Local Privilege Escalation

Symantec Encryption Desktop 10 - Local Buffer Overflow Local Privilege Escalation source: https://www.securityfocus.com/bid/57835/info Symantec Encryption Desktop is prone to a local buffer-overflow vulnerability. A local attacker may exploit this issue to execute arbitrary code with escalated...

Symantec Encryption Desktop 10 - Local Buffer Overflow / Local Privilege Escalation

source: https://www.securityfocus.com/bid/57835/info Symantec Encryption Desktop is prone to a local buffer-overflow vulnerability. A local attacker may exploit this issue to execute arbitrary code with escalated privileges. define IOCONTROLVULN 0x80022058 define TARGETDEVICE L"\Device\pgpwdef"...

Millions of pcAnywhere users still Vulnerable to hijacking

Millions of pcAnywhere users still Vulnerable to hijacking 3 weeks before we reported that Symantec releases patch to address pcAnywhere source code exposure, because attackers had obtained the remote access software's source code. But According to H.D. Moore, chief security officer at Rapid7,...

Variant of Zeusbot/Spyeye Botnet uses p2p network model

Variant of Zeusbot/Spyeye Botnet uses p2p network model Cybercriminals are using a modified version of the Zeusbot/Spyeye, which is using a peer-to-peer P2P network architecture, rather than a simple bot to command-and-control C&C server system, making the botnet much harder to take down, Symante...

2012 Most Vulnerable Cities At Risk Of Cyber Crime

2012 Most Vulnerable Cities At Risk Of Cyber Crime Norton's study showed the city was one of the ten worst for hacking. Each city was ranked by the prevalence of PCs and smartphones in addition to social media use with risk factors like unsecured Wi-Fi hotspots and malware attempts. Manchester wa...

Waves of Attacks Target Adobe Reader Bug From 2010

Thanks to the wonderful tendency of users not to update their applications, old vulnerabilities never die, they just get overtaken by newer and shinier ones. The attackers know this well, and every once in a while they serve up a nice reminder to the rest of us. The most recent one of these is a...

CVE-2012-0291

Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, Altiris Client Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 aka 12.5.x and 12.6.x allow...

Code injection

Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, Altiris Client Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 aka 12.5.x and 12.6.x allow...

CVE-2012-0291

Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, Altiris Client Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 aka 12.5.x and 12.6.x allow...

CVE-2012-0291

Affected product(s): Symantec pcAnywhere family (through 12.5.3) and related pcAnywhere Solutions (Altiris PCAnywhere-related suites) as listed in CVE-2012-0291. Vulnerability type / root cause: Denial of service caused by processing of malformed or unexpected input data (data from client, server...

KLA10356 Multiple vulnerabilities in pcAnywhere

Multiple serious vulnerabilities have been found in Symantec products. Malicious users can exploit these vulnerabilities to obtain access to client information or cause denial of service. Below is a complete list of vulnerabilities 1. lack of client state control can be exploited remotely by...

Symantec pcAnywhere awhost32 Remote Code Execution

Binary data pcanywhererce.nbin...

Symantec pcAnywhere 12.x 拒绝服务漏洞

Symantec pcAnywhere是一款流行的远程管理程序 当处理某些网络请求时awhost32组件存在错误，向TCP 5631端口提交特制报文可使awhost32服务崩溃，可导致连接中断，造成拒绝服务攻击 0 Symantec pcAnywhere 12.x 厂商解决方案 目前没有详细解决方案提供： http://www.symantec.com/homehomeoffice/products/remotepcfax/pca12/ !/usr/bin/python ''' Exploit Title: PCAnywhere Nuke Date: 2/16/12 Author:...

ndmp-fs-info NSE Script

Lists remote file systems by querying the remote device using the Network Data Management Protocol ndmp. NDMP is a protocol intended to transport data between a NAS device and the backup device, removing the need for the data to pass through the backup server. The following products are known to...