Symantec pcAnywhere Multiple Vulnerabilities (SYM12-002)

Critical Nessus Plugin ID 57796


An application installed on the remote host is affected by multiple remote vulnerabilities.


The version of Symantec pcAnywhere installed on the remote host is potentially affected by multiple vulnerabilities :

- When handling an authentication request the process copies the user-supplied username unsafely to a fixed-length buffer, which could lead to arbitrary code execution. (CVE-2011-3478)

- A local privilege escalation vulnerability exists because some files uploaded to the system during product installation are installed as writable by everyone. (CVE-2011-3479)

- During a valid client server session unexpected input to the client can result in an exception error. This can create an acess violation resulting in the remote session being dropped but leaving the client session open in specific instances. (CVE-2012-0290)

- Malformed input to a client or server or, an unexpected response to a request could potentially destabilize the application causing it to hang or crash resulting in a denial of service. (CVE-2012-0291)


Apply the hotfix referenced in the Symantec advisory.

See Also

Plugin Details

Severity: Critical

ID: 57796

File Name: symantec_pcanywhere_125_multiple_vulns.nasl

Version: $Revision: 1.19 $

Type: local

Agent: windows

Family: Windows

Published: 2012/02/02

Modified: 2016/11/03

Dependencies: 57795

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:ND

Vulnerability Information

CPE: cpe:/a:symantec:pcanywhere

Required KB Items: SMB/Symantec pcAnywhere/Path, SMB/Symantec pcAnywhere/Version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2012/01/23

Vulnerability Publication Date: 2012/01/23

Exploitable With

CANVAS (White_Phosphorus)

Core Impact

Reference Information

CVE: CVE-2011-3478, CVE-2011-3479, CVE-2012-0290, CVE-2012-0291

BID: 51592, 51593, 51862, 51965

OSVDB: 78532, 78533, 78988, 79601

EDB-ID: 18493, 18823, 19407

IAVA: 2012-A-0019