pcanywhere local exploit

This is about a month old but for those who aren’t aware of it (as I wasn’t)

From secnetops.biz:

PcAnywhere versions 10-11 allow a local user running with minimum privileges to access files as system. winhlp32 for ver. 10 and hh.exe for var. 11 (which run as system) can be accessed from the host help option allowing a user to browse files, change NTFS permissions or open a command prompt.

This is only a local exploit but there are some companies that what their systems locked down pretty tight.

A fix is available threw Symantic updates




BTW the same condition exists in Outpost Firewall

I didn't know bout that either, Ted....thanks for the heads up!