CVE-2011-3478: symantec pcanywhere Improper Authentication

EPSS trend

Probability

39.51%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 39.51% on 18-09-2026

18-09-202618-10-2026

EPSS score

39.51%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

exploit-databaseremotewindowsVerified
Symantec pcAnywhere 12.5.0 - 'Login' / 'Password' Remote Buffer Overflow
Maturity: weaponized
exploit-databaseremotewindows_x86Verified
Symantec pcAnywhere 12.5.0 (Windows x86) - Remote Code Execution
Maturity: weaponized

References

6 links

osvdb.org/show/osvdb/78532VDB EntryX Refsource OSVDB
www.exploit-db.com/exploits/38599/ExploitX Refsource EXPLOIT DB
www.securityfocus.com/bid/51592VDB EntryX Refsource BID
www.symantec.com/security_response/…X Refsource CONFIRMVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-12-018/X Refsource CONFIRM
secunia.com/advisories/48092Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2003-0936symantecpcanywhere0.40%22y ago18-11-2003 05:00Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe.CVE-2007-2619symantecpcanywhere0.32%19y ago11-05-2007 16:00Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785.CVE-2005-1970symantecpcanywhere0.41%21y ago14-06-2005 04:00Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature.CVE-2005-3934symantecpcanywhere9.46%20y ago01-12-2005 11:00Buffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and all other 32-bit versions allows remote attackers to cause a denial of service (application crash) via unknown attack vectors.CVE-2012-0291symantecaltiris_client_management_suite_pcanywhere_solution+32.31%14y ago22-02-2012 11:00Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allow remote attackers to cause a denial of service (application crash or hang) via (1) malformed data from a client, (2) malformed data from a server, or (3) an invalid response.CVE-2012-0292symantecaltiris_client_management_suite_pcanywhere_solution+47.09%14y ago08-03-2012 02:00The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.

All vulnerabilities inpcanywhere

CVE-2011-3478: symantec pcanywhere Improper Authentication

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References