CVE-2012-0292 The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7...
MediumCVSS 5.0
EPSS 6.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec pcanywhere | <= 12.5 | No fix listed |
| symantec pcanywhere | = 10.0 | No fix listed |
| symantec pcanywhere | = 10.5 | No fix listed |
| symantec pcanywhere | = 11.0 | No fix listed |
| symantec pcanywhere | = 11.0.1 | No fix listed |
| symantec pcanywhere | = 11.5 | No fix listed |
| symantec pcanywhere | = 11.5.1 | No fix listed |
| symantec pcanywhere | = 12.0 | No fix listed |
| symantec pcanywhere | = 12.0.1 | No fix listed |
| symantec pcanywhere | = 12.0.2 | No fix listed |
| symantec pcanywhere | = 12.0.3 | No fix listed |
| symantec pcanywhere | = 12.1 | No fix listed |
| symantec pcanywhere | = 12.5 | No fix listed |
| symantec pcanywhere | = 12.5-sp1 | No fix listed |
| symantec pcanywhere | = 12.5-sp2 | No fix listed |
| symantec pcanywhere | = 12.5.3 | No fix listed |
| symantec pcanywhere | = 12.5.265 | No fix listed |
| symantec pcanywhere | = 12.5.539 | No fix listed |
| symantec altiris client management suite pcanywhere solution | = 7.0 | No fix listed |
| symantec altiris climentent manage suite pcanywhere solution | = 7.1 | No fix listed |
| symantec altiris deployment solution remote pcanywhere solution | = 7.1 | No fix listed |
| symantec altiris it management suite pcanywhere solution | = 7.0 | No fix listed |
| symantec altiris it management suite pcanywhere solution | = 7.1 | No fix listed |
References
- 48092 third-party-advisory
- 18493 exploit
- 52094 exploit vdb-entry
- www.symantec.com vendor-advisory