CVE-2011-3478

CVE-2011-3478 affects Symantec pcAnywhere 12.5.x (and IT Management Suite pcAnywhere Solution 7.0/7.1) where the host-services login/authentication data is not properly filtered, enabling remote code execution via a crafted session over TCP port 5631. The root cause is a buffer/unsafe handling du...

CVE-2006-4855

The CVE-2006-4855 family concerns the Symantec Norton products (Norton Personal Firewall 2006 9.1.0.33 and related Norton Personal Firewall/Internet Security/AntiVirus/Symantec client products; Symantec Host) where the \Device\SymEvent driver (and related SYMTDI.SYS) is vulnerable to local privil...

CVE-2012-0291

Affected product(s): Symantec pcAnywhere family (through 12.5.3) and related pcAnywhere Solutions (Altiris PCAnywhere-related suites) as listed in CVE-2012-0291. Vulnerability type / root cause: Denial of service caused by processing of malformed or unexpected input data (data from client, server...

CVE-2000-0300

The CVE refers to PcAnywhere 9.x where the default encryption method is weak, enabling remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. Affected software: PcAnywhere 9.x (default encryption). Root cause: use of weak default encryption in the authentication pathway. Impact: ...

CVE-2012-0292

CVE-2012-0292 affects Symantec pcAnywhere and related pcAnywhere Solution/Altiris deployments, where the awhost32 service is vulnerable to a crafted TCP session on port 5631 that causes a denial of service (daemon crash). Affected: pcAnywhere up to 12.5.3 and related Altiris pcAnywhere/Deployment...

CVE-1999-1028

The CVE-1999-1028 entry concerns Symantec pcAnywhere 8.0. The affected component is the pcAnywhere service listening on port 5631. The documented impact is a remote denial of service caused by sending a large amount of data, leading to increased CPU utilization. The sources in the provided docume...

CVE-2005-1970

Summary: CVE-2005-1970 affects Symantec pcAnywhere versions 10.5x and 11.x prior to 11.5, where enabling “Launch with Windows” allows a local user with physical access to gain elevated privileges via the Caller Properties feature. The Nessus entry specifies that manipulating Caller Properties can...

CVE-2005-3934

CVE-2005-3934 , a buffer overflow in Symantec pcAnywhere (v11.0.1, v11.5.1, and all 32-bit versions) can be exploited remotely to cause a denial of service by crashing the application. The overflow occurs prior to authentication, allowing a remote attacker to terminate the pcAnywhere service with...

CVE-2000-0324

CVE-2000-0324 affects pcAnywhere 8.x and 9.0. The vulnerability allows remote attackers to cause a denial of service by sending a TCP SYN scan (e.g., via nmap). The provided documents state the impact as DoS but do not include specifics on root cause internals, affected versions beyond 8.x/9.0, o...

CVE-2012-0290

CVE-2012-0290 affects Symantec pcAnywhere and related Altiris pcAnywhere solutions (up to 12.5.x/12.6.x). The root cause is improper handling of client state after abnormal termination of a remote session, which can leave an open client session and allow remote attackers to obtain access to the c...

CVE-2009-0538

CVE-2009-0538 is a local format-string vulnerability in Symantec pcAnywhere prior to 12.5 SP1. The issue arises from improper handling of format strings in the filename/path of remote control files (CHF files), allowing a local attacker to read/write arbitrary memory and potentially cause a denia...

CVE-2003-0936

Symantec PCAnywhere 10.x and 11 are affected when running as a Windows service. The vulnerability lies in the GUI help interface, which can be manipulated via AWHOST32.exe to give a non-privileged user SYSTEM privileges on the local host. Exploitation is local and tied to service-mode operation; ...

CVE-2007-2619

CVE-2007-2619 affects Symantec pcAnywhere 11.5.x and 12.0.x, where unencrypted login credentials can reside in process memory. The description indicates local administrators can read memory to retrieve credentials, making this a local access issue. No explicit exploit details or mitigation are pr...

CVE-2000-0273

Technical details about CVE-2000-0273 are not publicly available in the provided documents. Monitor for updates.

CVE-2011-3479

CVE-2011-3479 concerns Symantec pcAnywhere 12.5.x–12.5.3 and IT Management Suite pcAnywhere Solution 7.0/7.1, which use world-writable permissions on product-installation files. This enables local users to gain privileges by modifying a file. Connected sources corroborate the affected products an...

CVE-2006-3785

CVE-2006-3785 Affected software: Symantec pcAnywhere 12.5. Vulnerability: Passwords in the GUI are obfuscated but not encrypted in the associated .cif (CallerID) file. This allows local users to extract passwords from the CIF/file using tools such as Nirsoft Asterwin. Impact: Local access is requ...

CVE-2006-3784

CVE-2006-3784 affects Symantec pcAnywhere 12.5. The vulnerability arises from weak default permissions on the "/Symantec\pcAnywhere\Hosts" folder, enabling local users to gain privileges by placing a superuser .cif (CallerID) file in that folder and then logging in with a pcAnywhere client as a l...

CVE-2006-3786

Symantec pcAnywhere 12.5 is affected by CVE-2006-3786 due to weak integrity protection for .cif (CallerID) files, enabling local users to craft a custom .cif file and modify the superuser flag. The concrete impact is local privilege manipulation. Exploitation status is not provided in the connect...