Symantec pcAnywhere Authentication Request Handling Denial of Service Vulnerability

Bugtraq ID:	52094
Class:	Unknown
CVE:	CVE-2012-0292
Remote:	Yes
Local:	No
Published:	Feb 17 2012 12:00AM
Updated:	Apr 09 2012 10:00PM
Credit:	Johnathan Norman
Vulnerable:	Symantec Remote pcAnywhere Solution 12.6 + Symantec Altiris Client Management Suite 7 + Symantec Altiris Deployment Solution 7.1 + Symantec IT Management Suite 7.1 + Symantec IT Management Suite 7.0 Symantec Remote pcAnywhere Solution 12.5 + Symantec Altiris Client Management Suite 7 + Symantec Altiris Deployment Solution 7.1 + Symantec IT Management Suite 7.1 + Symantec IT Management Suite 7.0 Symantec pcAnywhere Solution 12.6 + Symantec Altiris Client Management Suite 7 + Symantec Altiris Deployment Solution 7.1 + Symantec IT Management Suite 7.1 + Symantec IT Management Suite 7.0 Symantec pcAnywhere Solution 12.5 + Symantec Altiris Client Management Suite 7 + Symantec Altiris Deployment Solution 7.1 + Symantec IT Management Suite 7.1 + Symantec IT Management Suite 7.0 Symantec pcAnywhere 11.5.1 Symantec pcAnywhere 11.5 Symantec pcAnywhere 11.0.1 Symantec pcAnywhere 11.0 Symantec pcAnywhere 10.5 Symantec pcAnywhere 10.0 Symantec pcAnywhere 9.2 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Symantec pcAnywhere 9.0.1 Symantec pcAnywhere 9.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Symantec pcAnywhere 8.0.2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Symantec pcAnywhere 8.0.1 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Symantec pcAnywhere 12.5 SP3 Symantec pcAnywhere 12.5 SP2 Symantec pcAnywhere 12.5 SP1 Symantec pcAnywhere 12.5 Symantec pcAnywhere 12.1 Symantec pcAnywhere 12.0
Not Vulnerable:	Symantec pcAnywhere Solution 12.6.7 + Symantec Altiris Client Management Suite 7 + Symantec Altiris Deployment Solution 7.1 + Symantec IT Management Suite 7.1 + Symantec IT Management Suite 7.0 Symantec pcAnywhere 12.5 SP4

Symantec pcAnywhere Authentication Request Handling Denial of Service Vulnerability

Symantec pcAnywhere is prone to a denial-of-service vulnerability.

An attacker can exploit the issue to crash and restart the 'awhost32' service. Repeated attempts will result in a denial-of-service condition.

pcAnywhere versions 12.5 build 463 and prior are affected.

Symantec pcAnywhere Authentication Request Handling Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/52094.py

Symantec pcAnywhere Authentication Request Handling Denial of Service Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Symantec pcAnywhere Authentication Request Handling Denial of Service Vulnerability

References:

• pcAnywhere Homepage (Symantec)
  
• SYM12-003 Security Advisories Relating to Symantec Products - Symantec pcAnywher (Symantec)