CVE:CVE-2012-0290
CNNVD:CNNVD-201202-101
Symantec pcAnywhere是一款功能强大的远程控制软件。
Symantec pcAnywhere多个版本中存在漏洞，该漏洞源于没有妥善处理远程会话异常终止后的客户端状态。远程攻击者利用"open client session"获取对客户端的访问。
solution:Upgrade symantec pcanywhere to a higher version than 12.5.3,5.0,8.0,9.2,10.5,11.5,11.5.1,12.1,12.5:sp1,12.5:sp2,12.5:sp3,12.5.265,12.5,12.5.539,12.6.65,12.6.7580,and avoid the version (,12.5.3],5.0,8.0,9.2,10.5,11.5,11.5.1,12.1,12.5:sp1,12.5:sp2,12.5:sp3,12.5.265,12.5,12.5.539,12.6.65,12.6.7580; Upgrade symantec altiris_client_management_suite_pcanywhere_solution to a higher version than 12.5,12.5:sp1,12.5:sp2,12.6,12.6:sp1,12.6:sp2,and avoid the version 12.5,12.5:sp1,12.5:sp2,12.6,12.6:sp1,12.6:sp2; Upgrade symantec altiris_deployment_solution_remote_pcanywhere_solution to a higher version than 12.5,12.5:sp1,12.5:sp2,12.6,12.6:sp1,12.6:sp2,and avoid the version 12.5,12.5:sp1,12.5:sp2,12.6,12.6:sp1,12.6:sp2