Researcher releases exploit code that can allegedly crash pcAnywhere

Exploit code for a denial-of-service vulnerability identified in Symantec's pcAnywhere product, was published on the Internet

Exploit code targeting a newly identified vulnerability in Symantec's pcAnywhere computer remote control product has been published on the Internet, exposing its users to possible attacks that disrupt the software's functionality.

The code was published Friday on Pastebin by Johnathan Norman, director of security research at network security vendor Alert Logic, and can be used to crash an important pcAnywhere service called awhost32.

The denial-of-service (DoS) condition is not persistent, because the awhost32 process is restarted automatically, Norman said. This means that attackers would need to execute the exploit in a loop in order to create longer disruptions.

This is just one of several vulnerabilities that Norman claims to have identified in pcAnywhere while investigating a more serious remote code execution flaw patched by Symantec last month. "Not sure what I'm going to do with all of them," Norman said in a blog post on Friday.

According to the researcher, the exploit works against fully patched versions of pcAnywhere. "Symantec is aware of the posting and is investigating the claims," a Symantec spokesman said via email. The company could not provide any additional information at this time.

This vulnerability disclosure comes after hackers associated with the hacktivist group Anonymous leaked the source code of pcAnywhere on the Internet at the beginning of this month.

Following the source code's theft in early January, Symantec recommended that pcAnywhere users disable the application until it had a chance to issue patches for several vulnerabilities found in the product. Later that same month, the company gave pcAnywhere a clean bill of health after releasing several hotfixes.

However, the leak of the product's source code could theoretically pave the way for the identification of other vulnerabilities. An analysis of the leaked pcAnywhere files and documents performed by an anonymous researcher and published Friday by the InfoSec Institute concluded that the application has not changed much over the years. The current version is probably a continuation of the old code base instead of a rewrite.

Sponsored Content: Collaboration has become the new movement in IT. Servers will become an integral part of this industry transition. Click here to learn more.

Join the ARN newsletter!

Error: Please check your email address.

More about etworkNormanNormanSymantec

ARN Directory | Distributors relevant to this article

ARN Directory | Vendors relevant to this article

 

Latest News

02:21AM
Alibaba calls Chinese regulatory report unfair, as customer numbers grow
12:09AM
Office for Android now widely available, with new Outlook apps in tow
12:02AM
AllSeen IoT group acts to head off patent wars
11:49PM
The Upload: Your tech news briefing for Thursday, January 29
More News
05 May
CeBIT Australia 2015
27 May
World Business Forum Sydney
View all events