Symantec_pcAnywhere_Buffer_Overflow_attack

Strike ID:
G05-61a01
CVSS:
7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)
False Positive:
t
Variants:
1
Year:
2005

Description

This strike exploits a denial of service vulnerability in Symantec pcAnywhere. The vulnerability is caused due to improper boundary checking and can be exploited to cause a buffer overflow prior to authentication. A remote unauthenticated attacker can exploit the vulnerability to terminate the application, causing a denial of service condition. It has been reported by the vendor that an attack against this vulnerability will result in the unexpected termination of the affected product. In such a case, the remote control functionality of the target host will be unavailable until the service is restarted manually or automatically, depending on the setup.

CVE

References

Bid