Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-0292

The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.

Published

2012-03-08T04:15:02.683

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	symantec	pcanywhere	≤ 12.5	Yes
Application	symantec	pcanywhere	10.0	Yes
Application	symantec	pcanywhere	10.5	Yes
Application	symantec	pcanywhere	11.0	Yes
Application	symantec	pcanywhere	11.0.1	Yes
Application	symantec	pcanywhere	11.5	Yes
Application	symantec	pcanywhere	11.5.1	Yes
Application	symantec	pcanywhere	12.0	Yes
Application	symantec	pcanywhere	12.0.1	Yes
Application	symantec	pcanywhere	12.0.2	Yes
Application	symantec	pcanywhere	12.0.3	Yes
Application	symantec	pcanywhere	12.1	Yes
Application	symantec	pcanywhere	12.5	Yes
Application	symantec	pcanywhere	12.5	Yes
Application	symantec	pcanywhere	12.5	Yes
Application	symantec	pcanywhere	12.5.3	Yes
Application	symantec	pcanywhere	12.5.265	Yes
Application	symantec	pcanywhere	12.5.539	Yes
Application	symantec	altiris_client_management_suite_pcanywhere_solution	7.0	Yes
Application	symantec	altiris_climentent_manage_suite_pcanywhere_solution	7.1	Yes
Application	symantec	altiris_deployment_solution_remote_pcanywhere_solution	7.1	Yes
Application	symantec	altiris_it_management_suite_pcanywhere_solution	7.0	Yes
Application	symantec	altiris_it_management_suite_pcanywhere_solution	7.1	Yes

References

http://secunia.com/advisories/48092 ([email protected])
http://www.exploit-db.com/exploits/18493/ Exploit ([email protected])
http://www.securityfocus.com/bid/52094 Exploit ([email protected])
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120301_00 Vendor Advisory ([email protected])
http://secunia.com/advisories/48092 (af854a3a-2127-422b-91ae-364da2661108)
http://www.exploit-db.com/exploits/18493/ Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/52094 Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120301_00 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)