> Symantec released a patch fixing three vulnerabilities
> in pcAnywhere version 12.5 (the current version) on
> Monday, and said it will continue issuing patches
> "until a new version of pcAnywhere that addresses all
> currently known vulnerabilities is released."
The security professionals who do this for a living, and study this should disclose fully, but a corporate entity will never. They cannot because of shareholders, and there are way to many bugs out there and it would be embarrassing cleaning up that much crap.
Security vulnerabilities are sometimes architectural problems, some are related to ignorance, but a LOT more are just stupid bugs and people not writing code that is correct. A good attacker doesn't care how they get in, there is always a way.
It's a losing battle, just ask EWD.
http://www.cs.utexas.edu/~EWD/transcriptions/EWD03xx/EWD340....
\\ Edit: Words are tough.