medium5.0Public exploit code
CVE-2012-0292
The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Clie…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- pcAnywhere 12.5.0 build 463 - Denial of Service2012-02-17 · dos · windows
Impact
The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Pcanywhere | through 12.5 Versions 10.0, 10.5, 11.0, 11.0.1, 11.5 |
| Symantec | Altiris Client Management Suite Pcanywhere Solution | Version 7.0 |
| Symantec | Altiris Climentent Manage Suite Pcanywhere Solution | Version 7.1 |
| Symantec | Altiris Deployment Solution Remote Pcanywhere Solution | Version 7.1 |
| Symantec | Altiris It Management Suite Pcanywhere Solution | Versions 7.0, 7.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/48092
- http://www.exploit-db.com/exploits/18493/
- http://www.securityfocus.com/bid/52094
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120301_00
- http://secunia.com/advisories/48092
- http://www.exploit-db.com/exploits/18493/
- http://www.securityfocus.com/bid/52094
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120301_00