リモートホストにインストールされている Symantec pcAnywhere のバージョンは、複数の脆弱性の影響を受けます：

  - When handling an authentication request the process copies the user-supplied username unsafely to a fixed-length buffer, which could lead to arbitrary code execution. (CVE-2011-3478)

  - A local privilege escalation vulnerability exists because some files uploaded to the system during product installation are installed as writable by everyone. (CVE-2011-3479)

  - 有効なクライアントサーバーセッション中に、予期しない入力がクライアントへされると例外エラーが起こる可能性があります。This can create an acess violation resulting in the remote session being dropped but leaving the client session open in specific instances. (CVE-2012-0290)

  - Malformed input to a client or server or, an unexpected response to a request could potentially destabilize the application causing it to hang or crash resulting in a denial of service. (CVE-2012-0291)

検出

Symantec pcAnywhere Multiple Vulnerabilities (SYM12-002)

critical Nessus プラグイン ID 57796

変更ログが見つかりません