Symantec tells customers to disable pcAnywhere

 

Gallery

By Stewart Mitchell

Posted on 26 Jan 2012 at 14:22

Symantec has told customers to disable its remote desktop software pcAnywhere, after source code stolen in 2006 was published online.

Symantec recently admitted the source code had been stolen back in 2006, after threats to publicise details of the code were made by Anonymous hacktivists.

At the time it said there was no security threat, however, the company has now advised users to pull the plug on the program until it is able to secure the software.

“With this incident pcAnywhere customers have increased risk. Malicious users with access to the source code have an increased ability to identify vulnerabilities and build new exploits,” the company said in a white paper.

If the malicious user obtains the cryptographic key they have the capability to launch unauthorised remote control sessions

“Symantec recommends disabling the product until Symantec releases a final set of software updates that resolve currently known vulnerability risks. For customers that require pcAnywhere for business critical purposes, it is recommended that customers understand the current risks, ensure pcAnywhere 12.5 is installed and apply all relevant patches.”

The company said that unpatched consumers were most at risk, but that even up-to-date products were not fully secure.

“It is possible that successful man-in-the-middle attacks may occur depending on the configuration,” the company said.

“There are also secondary risks associated with this situation. If the malicious user obtains the cryptographic key they have the capability to launch unauthorised remote control sessions.”

Symantec also recommended blocking relevant ports and other security measures.