The version of Symantec pcAnywhere installed on the remote host is potentially affected by multiple vulnerabilities :

  - When handling an authentication request the process     copies the user-supplied username unsafely to a     fixed-length buffer, which could lead to arbitrary code     execution. (CVE-2011-3478)

  - A local privilege escalation vulnerability exists     because some files uploaded to the system during     product installation are installed as writable by     everyone. (CVE-2011-3479)

  - During a valid client server session unexpected input to     the client can result in an exception error.  This can     create an acess violation resulting in the remote     session being dropped but leaving the client session     open in specific instances. (CVE-2012-0290)

  - Malformed input to a client or server or, an unexpected     response to a request could potentially destabilize the     application causing it to hang or crash resulting in a     denial of service. (CVE-2012-0291)

リモートホストにインストールされている Symantec pcAnywhere のバージョンは、複数の脆弱性の影響を受けます：

  - When handling an authentication request the process copies the user-supplied username unsafely to a fixed-length buffer, which could lead to arbitrary code execution. (CVE-2011-3478)

  - A local privilege escalation vulnerability exists because some files uploaded to the system during product installation are installed as writable by everyone. (CVE-2011-3479)

  - 有効なクライアントサーバーセッション中に、予期しない入力がクライアントへされると例外エラーが起こる可能性があります。This can create an acess violation resulting in the remote session being dropped but leaving the client session open in specific instances. (CVE-2012-0290)

  - Malformed input to a client or server or, an unexpected response to a request could potentially destabilize the application causing it to hang or crash resulting in a denial of service. (CVE-2012-0291)

远程主机上安装的 Symantec pcAnywhere 版本可能受到多种漏洞的影响：

- 处理认证请求时，进程不安全地将用户提供的用户名复制到固定长度的缓冲区，这可导致任意代码执行。(CVE-2011-3478)

- 存在一个本地权限升级漏洞，原因是产品安装期间上传到系统的某些文件被安装为人人可写。(CVE-2011-3479)

- 有效客户端服务器会话期间，客户端的非预期输入可导致异常错误。这可造成访问违规，从而导致远程会话被终止，但在特定情况下保持客户端会话处于打开状态。(CVE-2012-0290)

- 客户端或服务器的畸形输入或者请求的非预期响应可能会使应用程序不稳定，造成其挂起或崩溃，从而导致拒绝服务。(CVE-2012-0291)

遠端主機上安裝的 Symantec pcAnywhere 版本可能受到多個弱點影響：

- 處理驗證要求時，程序以不安全的方式將使用者提供的使用者名稱複製到固定長度緩衝區，其可導致任意程式碼執行。(CVE-2011-3478)

- 存在一個本機權限提升弱點，這是因為在產品安裝期間，上傳至系統的某些檔案是作為任何人皆可寫入的檔案進行安裝的。(CVE-2011-3479)

- 在有效的用戶端伺服器工作階段期間，用戶端的未預期輸入可導致例外狀況錯誤。這可造成存取違規，進而導致遠端工作階段中斷，但卻在特定執行個體中將用戶端工作階段保持開啟狀態。(CVE-2012-0290)

- 在用戶端或伺服器提供格式錯誤的輸入，或對要求提供未預期的回應，都可能造成應用程式不穩定，使其懸置或損毀，從而導致拒絕服務。(CVE-2012-0291)

ID	名稱	產品	系列	已發布	已更新	嚴重性
57796	Symantec pcAnywhere Multiple Vulnerabilities (SYM12-002)	Nessus	Windows	2012/2/2	2018/11/15	critical
57796	Symantec pcAnywhere Multiple Vulnerabilities (SYM12-002)	Nessus	Windows	2012/2/2	2018/11/15	critical
57796	Symantec pcAnywhere 多种漏洞 (SYM12-002)	Nessus	Windows	2012/2/2	2018/11/15	critical
57796	Symantec pcAnywhere 多個弱點 (SYM12-002)	Nessus	Windows	2012/2/2	2018/11/15	critical

偵測

搜尋 Plugin

critical

critical

critical

critical