CVEvulnerability

CVE-2012-0292

5.0 MEDIUM Published 2012-03-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-03-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.

Affected configurations

• symantec pcanywhere (<= 12.5) • symantec pcanywhere 10.0 • symantec pcanywhere 10.5 • symantec pcanywhere 11.0 • symantec pcanywhere 11.0.1 • symantec pcanywhere 11.5 • symantec pcanywhere 11.5.1 • symantec pcanywhere 12.0 • symantec pcanywhere 12.0.1 • symantec pcanywhere 12.0.2 • symantec pcanywhere 12.0.3 • symantec pcanywhere 12.1 • symantec pcanywhere 12.5 • symantec pcanywhere 12.5.3 • symantec pcanywhere 12.5.265 • symantec pcanywhere 12.5.539 • symantec altiris client management suite pcanywhere solution 7.0 • symantec altiris climentent manage suite pcanywhere solution 7.1 • symantec altiris deployment solution remote pcanywhere solution 7.1 • symantec altiris it management suite pcanywhere solution 7.0 • symantec altiris it management suite pcanywhere solution 7.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References