GCVE - cpe:2.3:a:symantec:pcanywhere:12.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:pcanywhere:12.5:*:*:*:*:*:*:*

part: a version: 12.5 update: *

Vendor	Symantec (`88d7b611-7ce9-5631-abc6-1312dc87ce23`)
Product	Pcanywhere (`a5977b80-1387-5234-aeb0-0f22ee84f6ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-0292`	vulnerable	2026-06-08 05:00:40.585230	Details available The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631. Published: 2012-03-08T02:00:00.000Z Updated: 2024-08-06T18:23:29.362Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52094 http://www.exploit-db.com/exploits/18493/ http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120301_00 http://secunia.com/advisories/48092	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0291`	vulnerable	2026-06-08 05:00:40.576441	Details available Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allow remote attackers to cause a denial of service (application crash or hang) via (1) malformed data from a client, (2) malformed data from a server, or (3) an invalid response. Published: 2012-02-22T11:00:00.000Z Updated: 2024-08-06T18:23:30.070Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 http://www.securityfocus.com/bid/51965 http://secunia.com/advisories/48092	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0290`	vulnerable	2026-06-08 05:00:40.559843	Details available Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) do not properly handle the client state after abnormal termination of a remote session, which allows remote attackers to obtain access to the client by leveraging an "open client session." Published: 2012-02-06T20:00:00.000Z Updated: 2024-08-06T18:23:29.301Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/51862 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 https://exchange.xforce.ibmcloud.com/vulnerabilities/72996 http://secunia.com/advisories/48092	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3479`	vulnerable	2026-06-08 04:59:25.666396	Details available Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file. Published: 2012-01-25T15:00:00.000Z Updated: 2024-08-06T23:37:47.661Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 http://secunia.com/advisories/48092 http://www.securityfocus.com/bid/51593	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3478`	vulnerable	2026-06-08 04:59:25.661911	Details available The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a crafted session on TCP port 5631. Published: 2012-01-25T15:00:00.000Z Updated: 2024-08-06T23:37:47.739Z Open on db.gcve.eu Reference links http://osvdb.org/show/osvdb/78532 https://www.exploit-db.com/exploits/38599/ http://www.securityfocus.com/bid/51592 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 http://www.zerodayinitiative.com/advisories/ZDI-12-018/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3786`	vulnerable	2026-06-08 04:49:10.198874	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3785`	vulnerable	2026-06-08 04:49:10.198570	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3784`	vulnerable	2026-06-08 04:49:10.198197	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.