Vulnerabilities > Symantec > Pcanywhere > High

DATE CVE VULNERABILITY TITLE RISK
2006-07-24 CVE-2006-3784 Local Security vulnerability in Symantec Pcanywhere 12.5
Symantec pcAnywhere 12.5 uses weak default permissions for the "Symantec\pcAnywhere\Hosts" folder, which allows local users to gain privileges by inserting a superuser .cif (aka caller or CallerID) file into the folder, and then using a pcAnywhere client to login as a local administrator.
local
low complexity
symantec
7.2
2005-12-01 CVE-2005-3934 Denial of Service vulnerability in pcAnywhere Authentication
Buffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and all other 32-bit versions allows remote attackers to cause a denial of service (application crash) via unknown attack vectors.
network
low complexity
symantec
7.8
2005-06-16 CVE-2005-1970 Local Privileged Command Execution vulnerability in Symantec PCAnywhere
Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature.
local
low complexity
symantec
7.2
2003-12-15 CVE-2003-0936 Unspecified vulnerability in Symantec Pcanywhere 10.0/10.5/11.0
Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe.
local
low complexity
symantec
7.2