Nessus Plugin #10798

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Unprotected PC Anywhere Service

Family:

General

Category:

infos

Copyright:

This script is Copyright (C) 2002 Digital Defense Incorporated

Summary:

Unprotected PC Anywhere Service

Version:

$Revision: 1.16 $

Cve_id:

CAN-1999-0508

Bugtraq_id:

-

Xrefs:

-

Description:

The PC Anywhere service does not require a password to access
the desktop of this system. If this machine is running Windows 95,
98, or ME, gaining full control of the machine is trivial. If
this system is running NT or 2000 and is currently logged out, an
attacker can still spy on and hijack a legitimate user's session when
they login.

Solution:
1. Open the PC Anywhere application as an Administrator.
2. Right click on the Host object you are using and select Properties.
3. Select the Caller Access tab.
4. Switch the authentication type to Windows or PC Anywhere.
5. If you are using PC Anywhere authentication, set a strong password.

Risk factor : High