NVD

Id
42421  
Name
CVE-2012-0290  
Description
Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) do not properly handle the client state after abnormal termination of a remote session, which allows remote attackers to obtain access to the client by leveraging an "open client session."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-02-06  
Modified Date
2012-02-16  
Seq
2012-0290  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
213909 42421 CVE-2012-0290 51862  View
213910 42421 CVE-2012-0290 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00  View
213911 42421 CVE-2012-0290 pcanywhere-unauth-access(72996)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25620 JVNDB-2012-001327 Symantec pcAnywhere 製品におけるクライアントへアクセスされる脆弱性 Symantec pcAnywhere 製品は、リモートセッションの異常終了後のクライアントステータスを適切に処理しないため、クライアントへアクセスされる脆弱性が存在します。 CVE-2012-0290 53528 CVE-2012-0290 42421 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001327.html 2012-01-24 2012-02-08 View