medium6.8Public exploit code
CVE-2011-3479
Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions f…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec pcAnywhere - Insecure File Permissions Privilege Escalation2012-05-02 · local · windows
Impact
Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Pcanywhere | Versions 12.5, 12.5.539, 12.6.65, 12.6.7580 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/48092
- http://www.securityfocus.com/bid/51593
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00
- http://secunia.com/advisories/48092
- http://www.securityfocus.com/bid/51593
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00