PT-2003-1957 · Symantec · Symantec Pcanywhere

Kf · Published 2003-11-18 · Updated 2016-10-18 · CVE-2003-0936

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec PCAnywhere versions 10.x through 11.x

Description The issue allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe when Symantec PCAnywhere is started as a service.

Recommendations For Symantec PCAnywhere versions 10.x through 11.x, consider disabling the help interface or restricting access to AWHOST32.exe until a patch is available.

Fix

Related Identifiers

CVE-2003-0936

Affected Products

Symantec Pcanywhere

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2003-0936 · Security Note
• http://securityresponse.symantec.com/avcenter/security/Content/2003.11.13.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=106876107330752&w=2 · Note
• http://marc.info/?l=bugtraq&m=106875764826251&w=2 · Note