PT-2005-3708 · Solarwinds · Dameware Mini Remote Control

Ad · Published 2005-09-08 · Updated 2017-09-16 · CVE-2005-2842

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DameWare Mini Remote Control versions prior to 4.9.0

Description The issue allows remote attackers to execute arbitrary code via the username. This is due to a buffer overflow in dwrcs.exe.

Recommendations For versions prior to 4.9.0, update to version 4.9.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the dwrcs.exe component to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-2842

Affected Products

Dameware Mini Remote Control

References · 10

• 🔥 https://exploit-db.com/exploits/42703 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-08/1074.html · Exploit
• 🔥 http://jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt · Exploit
• 🔥 http://securityfocus.com/bid/14707 · Exploit
• 🔥 https://exploit-db.com/exploits/1190 · Exploit
• http://secunia.com/advisories/16655 · Vendor Advisory
• http://kb.cert.org/vuls/id/170905 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-2842 · Security Note
• http://securitytracker.com/id?1014830 · Vendor Advisory
• http://vupen.com/english/advisories/2005/1596 · Note