CVE-2012-0290

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) do not properly handle the client state after abnormal termination of a remote session, which allows remote attackers to obtain access to the client by leveraging an "open client session."

Affected Products (31)

symantec · pcanywherevulnerable

symantec · altiris_client_management_suite_pcanywhere_solutionvulnerable

symantec · altiris_deployment_solution_remote_pcanywhere_solutionvulnerable

References (8)

http://secunia.com/advisories/48092

http://www.securityfocus.com/bid/51862

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/72996

http://secunia.com/advisories/48092

http://www.securityfocus.com/bid/51862

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/72996