jetlib.sec » Bugtraq » NGS00118 Patch Notification: Symantec PCAnywhere Remote Code Execution as SYSTEM

Feeds

132963 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Bugtraq

• January 25, 2012
• 

  NGS00118 Patch Notification: Symantec PCAnywhere Remote Code Execution as SYSTEM

  Posted: January 25th, 2012, 8:21am PST

  Tags:   

  Posted by Research () NGSSecure on Jan 25

  Critical Vulnerability in Symantec PCAnywhere
  
  25 January 2012
  
  Edward Torkington of NGS Secure has discovered a critical vulnerability in Symantec PCAnywhere
  
  Impact: Remote Code Execution (pre-auth) as SYSTEM
  
  Versions affected:
  Symantec pcAnywhere 12.5.x
  IT Management Suite 7.0 pcAnywhere Solution 12.5.x
  IT Management Suite 7.1 pcAnywhere Solution 12.6.x
  
  An updated version of the software has been released to address these vulnerabilities:...