CVE-2006-3786

Description

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif (aka caller or CallerID) files, which allows local users to generate a custom .cif file and modify the superuser flag.

Affected products

• Symantec / pcanywhere12.5 – 12.5

References

• MISChttp://securitytracker.com/id?1016534
• MISChttp://www.securityfocus.com/archive/1/440448/100/0/threaded
• MISChttp://www.digitalbullets.org/?p=3
• MISChttp://securityreason.com/securityalert/1261