Symantec pcAnywhere Weak Encryption Vulnerability

Bugtraq ID:	1093
Class:	Design Error
CVE:	CVE-2000-0300
Remote:	Yes
Local:	Yes
Published:	Apr 06 2000 12:00AM
Updated:	Jul 11 2009 01:56AM
Credit:	Posted to Bugtraq on April 6, 2000 by Pascal Longpre <[email protected]>.
Vulnerable:	Symantec pcAnywhere 9.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0
Not Vulnerable:

Symantec pcAnywhere Weak Encryption Vulnerability

Symantec pcAnywhere is shipped by default with a weak encryption scheme that is used to encrypt username and password transmittal. Therefore, usernames and password can be retrieved by anyone sniffing the network in between the host computer running pcAnywhere and the NT domain controller.

Users of pcAnywhere can be authenticated with their NT domain username and password. In this case, the weakly encrypted transmitted authentication would be transmitted domain wide.

Symantec pcAnywhere Weak Encryption Vulnerability

Pascal Longpre <[email protected]> has released the following exploit:

• /data/vulnerabilities/exploits/pca90.c

Symantec pcAnywhere Weak Encryption Vulnerability

References:

• Common Questions About Symmetric or Public Key Encryption in pcAnywhere (Symantec)
  
• pcAnywhere Product Home Page (Symantec)