Vulnerabilities > CVE-2006-3786 - Local Security vulnerability in Symantec Pcanywhere 12.5

047910
CVSS 3.6 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
local
low complexity
symantec

Summary

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif (aka caller or CallerID) files, which allows local users to generate a custom .cif file and modify the superuser flag.

Vulnerable Configurations

Part Description Count
Application
Symantec
1