NVD

Id
10099  
Name
CVE-2011-3478  
Description
The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a crafted session on TCP port 5631.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2012-01-25  
Modified Date
2016-12-06  
Seq
2011-3478  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57855 10099 CVE-2011-3478 78532  View
57856 10099 CVE-2011-3478 51592  View
57857 10099 CVE-2011-3478 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00  View
57858 10099 CVE-2011-3478 http://www.zerodayinitiative.com/advisories/ZDI-12-018/  View
57859 10099 CVE-2011-3478 38599  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25515 JVNDB-2012-001222 Symantec pcAnywhere 製品における任意のコードを実行される脆弱性 Symantec pcAnywhere 製品の host-services コンポーネントは、ログインおよび認証データを適切にフィルタリングしないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-3478 51385 CVE-2011-3478 10099 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001222.html 2012-01-22 2012-01-27 View