Description
Symantec pcAnywhere 12.5 uses weak integrity protection for .cif (aka caller or CallerID) files, which allows local users to generate a custom .cif file and modify the superuser flag.
References
- 1016534 vdb-entry
- 20060718 PcAnywhere > 12 Local Privilege Escalation mailing-list
- http://www.digitalbullets.org/?p=3
- 1261 third-party-advisory