Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-3479

Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file.

Published

2012-01-25T15:55:01.050

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Access Vector: LOCAL
Access Complexity: LOW
Authentication: SINGLE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.1

Impact Score

10.0

Weaknesses

Type: Primary
CWE-264

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	symantec	pcanywhere	12.5	Yes
Application	symantec	pcanywhere	12.5	Yes
Application	symantec	pcanywhere	12.5	Yes
Application	symantec	pcanywhere	12.5	Yes
Application	symantec	pcanywhere	12.5.539	Yes
Application	symantec	pcanywhere	12.6.65	Yes
Application	symantec	pcanywhere	12.6.65	Yes
Application	symantec	pcanywhere	12.6.7580	Yes

References

http://secunia.com/advisories/48092 ([email protected])
http://www.securityfocus.com/bid/51593 ([email protected])
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 Vendor Advisory ([email protected])
http://secunia.com/advisories/48092 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/51593 (af854a3a-2127-422b-91ae-364da2661108)
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)