MEDIUM · 5.0

CVE-2012-0292

The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7...

Vulnerability Description

The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
SymantecPcanywhere<= 12.5
SymantecAltiris Client Management Suite Pcanywhere Solution7.0
SymantecAltiris Climentent Manage Suite Pcanywhere Solution7.1
SymantecAltiris Deployment Solution Remote Pcanywhere Solution7.1
SymantecAltiris It Management Suite Pcanywhere Solution7.0

Related Weaknesses (CWE)

References

FAQ

What is CVE-2012-0292?

CVE-2012-0292 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7...

How severe is CVE-2012-0292?

CVE-2012-0292 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-0292?

Check the references section above for vendor advisories and patch information. Affected products include: Symantec Pcanywhere, Symantec Altiris Client Management Suite Pcanywhere Solution, Symantec Altiris Climentent Manage Suite Pcanywhere Solution, Symantec Altiris Deployment Solution Remote Pcanywhere Solution, Symantec Altiris It Management Suite Pcanywhere Solution.