pcA Quick Connect connection information is saved in a file under the All Users folder
Last Updated October 07, 2010
Symantec pcAnywhere Restricted User Fix – The pcA Quick Connect application saves files containing connection settings in an unsecured location on computers running Windows. The condition for saving a settings file is that the "Preserve Credentials" option is checked during a connection attempt. Details stored include credentials used to logon to a pcAnywhere session, and the name or IP address of the pcAnywhere host computer. The files are not stored in plain text. However, on a multi-user system, the files could potentially allow an unauthorized user to initiate a remote control session to the host computer without providing credentials.
Symantec has released a patch. After applying this patch, the pcA Quick Connect application will save the "caller" file under the user-specific folder "My Documents" folder. This patch contains PCAQuickconnectDll.dll file. There are two versions of this patch attached to this article.
2006101_-_pcA_Box_SP1_SP2.zip - This patch can be applied only to the following Symantec pcAnywhere "standalone" or "box" versions:
pcAnywhere Box 12.5.0, Build 442
pcAnywhere Box 12.5.0, Build 463
The build number can be determined by checking Help -> About in the Symantec pcAnywhere window.
2006101_-_pcA_Solution_SP2.zip - This patch can be applied to computers with the Symantec pcAnywhere Agent (Plug-in) version 12.5.539 (available with pcAnywhere Solution SP2).
To Apply the Patch Symantec ALWAYS recommends backing up any files or folders, especially the Windows Registry before making any changes. Before or after applying the patch, move the existing caller files (*.CHF) from the All Users folder to the user-specific locations.
Close all open Symantec pcAnywhere 12.5 applications
Backup the existing PCAQuickconnectDll.dll file from the existing Symantec pcAnywhere folder under Program Files and store it in a separate folder.
Replace the existing pcAnywhere PCAQuickconnectDll.dll file with the file provided in this patch.
When the "Preserve Credentials" option is checked within pcA Quick Connect, the connection files will be saved in the current user's profile rather than the All Users profile.
pcAnywhere Solution customers may choose to automate delivery of this patch. Please see related article HOWTO30256 , entitled "How to create and deploy a Managed Software Delivery policy", for instructions.