CVE-2007-2619: Medium severity Symantec pcAnywhere vulnerability
Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2619?
CVE-2007-2619 is classified as a high severity vulnerability due to its potential to expose sensitive login credentials.
How do I fix CVE-2007-2619?
To fix CVE-2007-2619, users should upgrade to a version of Symantec pcAnywhere that is not affected, such as any version beyond 12.0.x.
What are the impacts of CVE-2007-2619?
CVE-2007-2619 allows local administrators to read process memory and obtain unencrypted login credentials, leading to unauthorized access.
Which versions of Symantec pcAnywhere are affected by CVE-2007-2619?
Symantec pcAnywhere versions 11.5.x and 12.0.x are affected by CVE-2007-2619.
Is there a workaround for CVE-2007-2619 if immediate upgrading is not possible?
Disabling remote access features may help mitigate the risk associated with CVE-2007-2619 if an immediate upgrade cannot be performed.