First published: Thu Apr 06 2000(Updated: )
The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec pcAnywhere | =9.0 | |
=9.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2000-0300 is considered high due to the use of weak encryption methods.
To fix CVE-2000-0300, upgrade to a newer version of PcAnywhere that uses stronger encryption methods.
CVE-2000-0300 specifically affects Symantec PcAnywhere version 9.0.
CVE-2000-0300 can be exploited by remote attackers to sniff and decrypt account credentials.
A temporary workaround for CVE-2000-0300 is to avoid using the default encryption method and switch to more secure options if available.