CVE-2011-3478
First published: Wed Jan 25 2012(Updated: )
The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a crafted session on TCP port 5631.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec pcAnywhere | =12.5 | |
| Symantec pcAnywhere | =12.6.7580 | |
| Symantec pcAnywhere | =12.6.65-sp1 | |
| Symantec pcAnywhere | =12.5-sp3 | |
| Symantec pcAnywhere | =12.6.65 | |
| Symantec pcAnywhere | =12.5-sp1 | |
| Symantec pcAnywhere | =12.5-sp2 | |
| Symantec pcAnywhere | =12.5.539 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00
- http://www.securityfocus.com/bid/51592
- https://www.exploit-db.com/exploits/38599/
- http://osvdb.org/show/osvdb/78532
- http://www.zerodayinitiative.com/advisories/ZDI-12-018/
- http://secunia.com/advisories/48092
Frequently Asked Questions
What is the severity of CVE-2011-3478?
CVE-2011-3478 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2011-3478?
To fix CVE-2011-3478, upgrade to the latest version of Symantec pcAnywhere that addresses this vulnerability.
What are the affected versions of Symantec pcAnywhere for CVE-2011-3478?
CVE-2011-3478 affects Symantec pcAnywhere versions 12.5.x through 12.5.3 and 12.6.x up to version 12.6.7580.
What type of attacks can exploit CVE-2011-3478?
CVE-2011-3478 can be exploited by remote attackers sending crafted login and authentication data.
Is there a workaround for CVE-2011-3478?
While patching is the preferred solution for CVE-2011-3478, temporary measures may include disabling remote access or restricting access to trusted networks.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- vendor/symantec
- canonical/symantec pcanywhere
- version/symantec pcanywhere/12.5
- version/symantec pcanywhere/12.6.7580
- version/symantec pcanywhere/12.6.65-sp1
- version/symantec pcanywhere/12.5-sp3
- version/symantec pcanywhere/12.6.65
- version/symantec pcanywhere/12.5-sp1
- version/symantec pcanywhere/12.5-sp2
- version/symantec pcanywhere/12.5.539