fkie_cve-2011-3479
Vulnerability from fkie_nvd
Published
2012-01-25 15:55
Modified
2025-04-11 00:51
Severity ?
Summary
Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file.
References
cve@mitre.orghttp://secunia.com/advisories/48092
cve@mitre.orghttp://www.securityfocus.com/bid/51593
cve@mitre.orghttp://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/48092
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/51593
af854a3a-2127-422b-91ae-364da2661108http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00Vendor Advisory
Impacted products
Vendor Product Version
symantec pcanywhere 12.5
symantec pcanywhere 12.5
symantec pcanywhere 12.5
symantec pcanywhere 12.5
symantec pcanywhere 12.5.539
symantec pcanywhere 12.6.65
symantec pcanywhere 12.6.65
symantec pcanywhere 12.6.7580


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:symantec:pcanywhere:12.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "067CAB0F-D513-4A70-B6C6-06EE290A2F6F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:symantec:pcanywhere:12.5:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "39F3C225-B890-47BB-9898-0EFEC969B74D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:symantec:pcanywhere:12.5:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "A4C296DE-5385-4C59-8824-B1695D38C332",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:symantec:pcanywhere:12.5:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "F1C797C5-7F76-4ECE-859C-B928F380A08D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:symantec:pcanywhere:12.5.539:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9C845AC-3C09-4676-964F-644A01D133CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:symantec:pcanywhere:12.6.65:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0D0B814-A9C3-4D47-B1C5-59DE0CFEDCF4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:symantec:pcanywhere:12.6.65:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "D2415480-FC3C-45BF-B93C-F76F0C011F97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:symantec:pcanywhere:12.6.7580:*:*:*:*:*:*:*",
              "matchCriteriaId": "92218E59-B767-498A-8F09-20202AE643E0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file."
    },
    {
      "lang": "es",
      "value": "Symantec pcAnywhere v12.5.x a trav\u00e9s de c12.5.3, y IT Management Suite pcAnywhere soluci\u00f3n c7.0 (aka 12.5.x) y c7.1 (tambi\u00e9n conocido como 12.6.x), utiliza el mundo pueda escribir permisos para los archivos de instalaci\u00f3n del producto, que permite a usuarios locales conseguir privilegios mediante la modificaci\u00f3n de un archivo."
    }
  ],
  "id": "CVE-2011-3479",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "SINGLE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 6.8,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.1,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2012-01-25T15:55:01.050",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/48092"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/51593"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=2012\u0026suid=20120124_00"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/48092"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/51593"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=2012\u0026suid=20120124_00"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.