PT-2005-2920 · Symantec · Pcanywhere

Published 2005-06-14 · Updated 2008-09-05 · CVE-2005-1970

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec pcAnywhere versions 10.5x through 11.x before 11.5

Description The issue allows local users with physical access to execute arbitrary commands via the Caller Properties feature when "Launch with Windows" is enabled.

Recommendations For Symantec pcAnywhere versions 10.5x through 11.x before 11.5, disable the "Launch with Windows" feature to prevent exploitation. Consider upgrading to version 11.5 or later.

Fix

Related Identifiers

CVE-2005-1970

Affected Products

Pcanywhere

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-1970 · Security Note
• http://securityfocus.com/bid/13933 · Patch
• http://securityresponse.symantec.com/avcenter/security/Content/2005.06.10.html · Vendor Advisory
• http://securitytracker.com/id?1014178 · Note
• http://secunia.com/advisories/15673 · Note