File Transfer security problem in pcAnywhere v8.0

Subject: File Transfer security problem in pcAnywhere v8.0
From: Jason Deaton (Jason_DeatonTCSMGMT.COM)
Date: Tue Dec 28 1999 - 10:42:55 CST

• Next message: Eric Chien: "Re: Bypass Virus Checking under 95/98/NT"
• Previous message: Ussr Labs: "Local / Remote D.o.S Attack in Savant Web Server V2.0 WIN9X / NT / 2K"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

        I found a problem with the file transfer security in pcAnywhere
v8.0 for Windows NT 4.0 that allows a remote to transfer files even with
the host set to not allow file transfer from remote. To do this:

        1. Connect to the pcAnywhere host machine.
        2. Right-click on pcAnywhere in the host's toolbar and select File
Transfer| Controlled by Host.
        3. This brings up the file transfer status on the remote PC. On
the remote, hit ALT+F4, which closes the file transfer status screen, and
brings up the remote control screen.
        4. In the remote control screen, the file transfer dialog is still
open. Files can then be sent from the remote to the host.

        I have been unable to find this anywhere on the Symantec Web site.
I have also not been able to test this with pcAnywhere v 9.0. Any other
information about pcAnywhere 9.0 would be appreciated.

 J. Deaton
 TCS Management Group, Inc.

• Next message: Eric Chien: "Re: Bypass Virus Checking under 95/98/NT"
• Previous message: Ussr Labs: "Local / Remote D.o.S Attack in Savant Web Server V2.0 WIN9X / NT / 2K"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b27 : Wed Dec 29 1999 - 08:14:10 CST