Pcanywhere (Symantec) - vulnerabilities (CVEs)
18 CVEs, 0 in the last 30 days, 33 known versions, newest CVE from 2012-03-08. Vendor: Symantec.
CVEs of Pcanywhere
- CVE-2012-0292 - CVSS 5 (medium), 2012-03-08: The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris…
- CVE-2012-0291 - CVSS 5 (medium), 2012-02-22: Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite…
- CVE-2012-0290 - CVSS 10 (critical), 2012-02-06: Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite…
- CVE-2011-3479 - CVSS 6.8 (medium), 2012-01-25: Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions…
- CVE-2011-3478 - CVSS 10 (critical), 2012-01-25: The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x),…
- CVE-2009-0538 - CVSS 4.6 (medium), 2009-03-18: Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of…
- CVE-2007-2619 - CVSS 4.6 (medium), 2007-05-11: Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators…
- CVE-2006-4855 - CVSS 4.9 (medium), 2006-09-19: The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus,…
- CVE-2006-3785 - CVSS 2.1 (low), 2006-07-24: Symantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not encrypt them in the associated .cif (aka caller or CallerID)…
- CVE-2006-3784 - CVSS 7.2 (high), 2006-07-24: Symantec pcAnywhere 12.5 uses weak default permissions for the "Symantec\pcAnywhere\Hosts" folder, which allows local users to gain privileges by inserting a…
- CVE-2006-3786 - CVSS 3.6 (low), 2006-07-24: Symantec pcAnywhere 12.5 uses weak integrity protection for .cif (aka caller or CallerID) files, which allows local users to generate a custom .cif file and…
- CVE-2005-3934 - CVSS 7.8 (high), 2005-12-01: Buffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and all other 32-bit versions allows remote attackers to cause a denial of service (application crash)…
- CVE-2005-1970 - CVSS 7.2 (high), 2005-06-16: Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via…
- CVE-2003-0936 - CVSS 7.2 (high), 2003-12-15: Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe.
- CVE-2000-0324 - CVSS 5 (medium), 2000-04-25: pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
- CVE-2000-0273 - CVSS 5 (medium), 2000-04-09: PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.
- CVE-2000-0300 - CVSS 10 (critical), 2000-04-06: The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.
- CVE-1999-1028 - CVSS 5 (medium), 1999-05-28: Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631.
