VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Jan 25, 2012· Updated Apr 29, 2026

CVE-2011-3478

CVE-2011-3478

Description

The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a crafted session on TCP port 5631.

Affected products

8
  • Symantec/Pcanywhere8 versions
    cpe:2.3:a:symantec:pcanywhere:12.5:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:symantec:pcanywhere:12.5:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:pcanywhere:12.5:sp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:pcanywhere:12.5:sp2:*:*:*:*:*:*
    • cpe:2.3:a:symantec:pcanywhere:12.5:sp3:*:*:*:*:*:*
    • cpe:2.3:a:symantec:pcanywhere:12.5.539:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:pcanywhere:12.6.65:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:pcanywhere:12.6.65:sp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:pcanywhere:12.6.7580:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.