CVE-2006-3786: Symantec Pcanywhere

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif (aka caller or CallerID) files, which allows local users to generate a custom .cif file and modify the superuser flag.

Affected products

• Symantec Pcanywhere: version 12.5 only

Published 2006-07-24. Last modified 2026-06-16.