PT-2012-1710 · Symantec · Pcanywhere+1

Publicado 2012-01-25 · Atualizado 2018-01-06 · CVE-2011-3479

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec pcAnywhere versions 12.5.x through 12.5.3 Symantec IT Management Suite pcAnywhere Solution version 7.0 (aka 12.5.x) Symantec IT Management Suite pcAnywhere Solution version 7.1 (aka 12.6.x)

Description The issue allows local users to gain privileges by modifying a file due to world-writable permissions for product-installation files.

Recommendations For Symantec pcAnywhere versions 12.5.x through 12.5.3, consider changing the permissions of the product-installation files to prevent world-writable access until a patch is available. For Symantec IT Management Suite pcAnywhere Solution version 7.0 (aka 12.5.x), restrict access to the installation files to minimize the risk of exploitation. For Symantec IT Management Suite pcAnywhere Solution version 7.1 (aka 12.6.x), apply configuration changes to limit the permissions of the installation files.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-3479

Produtos afetados

It Management Suite Pcanywhere Solution

Pcanywhere

Referências · 5

• 🔥 https://exploit-db.com/exploits/18823 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-3479 · Nota de Segurança
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 · Aviso do Fabricante
• http://secunia.com/advisories/48092 · Nota
• http://securityfocus.com/bid/51593 · Nota