PT-2005-2920 · Symantec · Pcanywhere

Publicado 2005-06-14 · Atualizado 2008-09-05 · CVE-2005-1970

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec pcAnywhere versions 10.5x through 11.x before 11.5

Description The issue allows local users with physical access to execute arbitrary commands via the Caller Properties feature when "Launch with Windows" is enabled.

Recommendations For Symantec pcAnywhere versions 10.5x through 11.x before 11.5, disable the "Launch with Windows" feature to prevent exploitation. Consider upgrading to version 11.5 or later.

Correção

Identificadores relacionados

CVE-2005-1970

Produtos afetados

Pcanywhere

Referências · 5

• http://securitytracker.com/id?1014178 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1970 · Nota de Segurança
• http://securityfocus.com/bid/13933 · Correção
• http://securityresponse.symantec.com/avcenter/security/Content/2005.06.10.html · Aviso do Fabricante
• http://secunia.com/advisories/15673 · Nota