PT-2006-4644 · Symantec · Pcanywhere

Root · Published 2006-07-21 · Updated 2018-10-17 · CVE-2006-3784

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec pcAnywhere version 12.5

Description The issue allows local users to gain privileges by inserting a superuser .cif file into the "SymantecpcAnywhereHosts" folder, and then using a pcAnywhere client to login as a local administrator. This is due to weak default permissions for the folder.

Recommendations For Symantec pcAnywhere version 12.5, consider changing the default permissions of the "SymantecpcAnywhereHosts" folder to prevent local users from inserting malicious .cif files. As a temporary workaround, restrict access to the folder and monitor for any suspicious activity.

Fix

Related Identifiers

CVE-2006-3784

Affected Products

Pcanywhere

References · 6

• http://secunia.com/advisories/21113 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3784 · Security Note
• http://vupen.com/english/advisories/2006/2874 · Note
• http://securityfocus.com/archive/1/440448/100/0/threaded · Note
• http://digitalbullets.org/?p=3 · Note
• http://securityreason.com/securityalert/1261 · Note