KLA10356
Multiple vulnerabilities in pcAnywhere

Multiple serious vulnerabilities have been found in Symantec products. Malicious users can exploit these vulnerabilities to obtain access to client information or cause denial of service. Below is a complete list of vulnerabilities

1. lack of client state control can be exploited remotely by leveraging ‘open client session’;
2. 2. Unknown vectors can be exploited via a specially designed TCP session or response.

Symantec pcAnywhere versions 12.5.3 and earlier
Symantec Altiris IT Management Suite pcAnywhere Solution 7.0 and 7.1
Symantec Altiris Client Management Suite pcAnywhere Solution 7.0 and 7.1
Symantec Altiris Deployment Solution Remote pcAnywhere Solution 7.1

Update to latest version

The following public exploits exists for this vulnerability:

https://www.exploit-db.com/exploits/18493