Symantec pcAnywhere Multiple Vulnerabilities (SYM12-002)

critical Nessus Plugin ID 57796

Language:

Synopsis

An application installed on the remote host is affected by multiple remote vulnerabilities.

Description

The version of Symantec pcAnywhere installed on the remote host is potentially affected by multiple vulnerabilities :

- When handling an authentication request the process copies the user-supplied username unsafely to a fixed-length buffer, which could lead to arbitrary code execution. (CVE-2011-3478)

- A local privilege escalation vulnerability exists because some files uploaded to the system during product installation are installed as writable by everyone. (CVE-2011-3479)

- During a valid client server session unexpected input to the client can result in an exception error. This can create an acess violation resulting in the remote session being dropped but leaving the client session open in specific instances. (CVE-2012-0290)

- Malformed input to a client or server or, an unexpected response to a request could potentially destabilize the application causing it to hang or crash resulting in a denial of service. (CVE-2012-0291)

Solution

Apply the hotfix referenced in the Symantec advisory.

Plugin Details

Severity: Critical

ID: 57796

File Name: symantec_pcanywhere_125_multiple_vulns.nasl

Version: 1.21

Type: local

Agent: windows

Family: Windows

Published: 2/2/2012

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:symantec:pcanywhere

Required KB Items: SMB/Symantec pcAnywhere/Path, SMB/Symantec pcAnywhere/Version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 1/23/2012

Vulnerability Publication Date: 1/23/2012

Exploitable With

CANVAS (White_Phosphorus)

Core Impact

Reference Information

CVE: CVE-2011-3478, CVE-2011-3479, CVE-2012-0290, CVE-2012-0291

BID: 51592, 51593, 51862, 51965

IAVA: 2012-A-0019

Detections

Analytics