Symantec pcAnywhere ‘awhost32’ Remote Code Execution Vulnerability

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Date Alert Description; CVE Symantec pcAnywhere through , Altiris IT Management Suite pcAnywhere Solution (aka x) and (aka x), Altiris Client Management Suite pcAnywhere Solution (aka x) and (aka x), and Altiris Deployment Solution Remote pcAnywhere Solution (aka x and x) do not . Date Alert Description; 5: CVE The awhost32 service in Symantec pcAnywhere through , Altiris IT Management Suite pcAnywhere Solution (aka x) and (aka x), Altiris Client Management Suite pcAnywhere Solution (aka x) and (aka x), and Altiris Deployment Solution Remote pcAnywhere Solution (aka . Symantec’s pcAnywhere allows support staff to see what users are seeing and resolve the problem. Unlike RDP, which creates a new, separate session when someone connects to a workstation, pcAnywhere allows users to share what they see with someone else. Users can allow someone else to take control remotely, transfer files back and forth.
 
 

Symantec pcAnywhere Host Services Login Overflow

 
An authorized but unprivileged user with local access to a targeted host could potentially overwrite these files with code of their choice in an attempt to leverage elevated privileges. All references symantec pcanywhere 12.5 sp1 free been updated in this advisory смотрите подробнее point to the new TECH Any use of this information is at the user’s risk. More Pages to Explore Problem A stack overflow exist in the pcAnywhere Host Service when parsing login names. If so, has it been working well, or you gave up and switched to Bomgar as suggested by Symantec? Under normal installation and configuration in a network environment, access to this port should only be available to authorized network users.