Description
Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785.
References
- pcanywhere-memory-information-disclosure(34203) vdb-entry
- ADV-2007-1753 vdb-entry
- 41982 vdb-entry
- http://securityresponse.symantec.com/avcenter/security/Content/2007.05.09b.html
- 1018032 vdb-entry
- 23875 vdb-entry