Published: 25/01/2012 Updated: 06/01/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The host-services component in Symantec pcAnywhere 12.5.x up to and including 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote malicious users to execute arbitrary code via a crafted session on TCP port 5631.

Vulnerable Product	Search on Vulmon	Subscribe to Product
symantec pcanywhere 12.6.7580
symantec pcanywhere 12.5.539
symantec pcanywhere 12.5
symantec pcanywhere 12.6.65

Symantec PcAnywhere version 1250 login and password field buffer overflow exploit ...

#!/usr/bin/python ################################################################ # Exploit Title: Symantec pcAnywhere v1250 Windows x86 RCE # Date: 2015-10-31 # Exploit Author: Tomislav Paskalev # Vendor Homepage: wwwsymanteccom/ # Software Link: esdownloadsymanteccom/akdlm/CD/MTV/pcAnywhere_12_5_MarketingTrialwareexe # V ...

#!/usr/bin/python # Exploit Title: Symantec PcAnywhere login and password field buffer overflow # Date: 20120627 # Author: S2 Crew [Hungary] # Software Link: symanteccom # Version: 1250 # Tested on: Windows XP SP2 # CVE: CVE-2011-3478 #EDB Note: Needs adjustment but there is a crash # Code : import socket import time import struct import ...

CWE-287 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 http://www.securityfocus.com/bid/51592 https://www.exploit-db.com/exploits/38599/http://osvdb.org/show/osvdb/78532 http://www.zerodayinitiative.com/advisories/ZDI-12-018/http://secunia.com/advisories/48092 https://nvd.nist.gov https://packetstormsecurity.com/files/114230/Symantec-PcAnywhere-12.5.0-Buffer-Overflow.html https://www.exploit-db.com/exploits/38599/

CVE-2011-3478

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect