CVE-2000-0300

Description

The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.

Affected products

• Symantec / pcanywhere9.0 – 9.0

Exploits & proofs of concept

• exploit-dbSymantec pcAnywhere 9.0 - Weak Encryptionby Pascal Longpre

References

• MISChttp://www.securityfocus.com/bid/1093
• MISChttp://www.securityfocus.com/templates/archive.pike?list=1&msg=20000406030958.23902.qmail%40securityfocus.com