Signature Detail

APP: PCAnywhere Login-Password Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Symantec pcAnywhere. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the security context of the SYSTEM user.

Extended Description

pcAnywhere is prone to a remote code-execution vulnerability. An attacker can exploit this vulnerability to execute arbitrary code in the context of the affected application. This may facilitate a complete compromise of the affected computer. pcAnywhere 12.5 versions are affected; other versions may also be affected.

Affected Products

• Symantec pcanywhere 10.0.0
• Symantec pcanywhere 10.5.0
• Symantec pcanywhere 11.0.0
• Symantec pcanywhere 11.0.1
• Symantec pcanywhere 11.5.0
• Symantec pcanywhere 11.5.1
• Symantec pcanywhere 12.0
• Symantec pcanywhere 12.1
• Symantec pcanywhere 12.5
• Symantec pcanywhere 12.5 SP1
• Symantec pcanywhere 12.5 SP3
• Symantec pcanywhere_solution 12.5
• Symantec pcanywhere_solution 12.6

References

• BugTraq: 51592
• CVE: CVE-2011-3478
• URL: http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00