CVE-2005-2842

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-2842
Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://archives.neohapsis.com/archives/fulldisclosure/2005-08/1074.html Exploit Patch Vendor Advisory
http://secunia.com/advisories/16655 Vendor Advisory
http://securitytracker.com/id?1014830 Patch Vendor Advisory
http://www.jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt Exploit Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/170905 Patch Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/14707 Exploit Patch
http://www.vupen.com/english/advisories/2005/1596
https://www.exploit-db.com/exploits/42703/
http://archives.neohapsis.com/archives/fulldisclosure/2005-08/1074.html Exploit Patch Vendor Advisory
http://secunia.com/advisories/16655 Vendor Advisory
http://securitytracker.com/id?1014830 Patch Vendor Advisory
http://www.jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt Exploit Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/170905 Patch Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/14707 Exploit Patch
http://www.vupen.com/english/advisories/2005/1596
https://www.exploit-db.com/exploits/42703/
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dameware_development:mini_remote_control_server:4.0:*:*:*:*:*:*:*
cpe:2.3:a:dameware_development:mini_remote_control_server:4.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dameware_development:mini_remote_control_server:4.2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dameware_development:mini_remote_control_server:4.8:*:*:*:*:*:*:*
History

21 Nov 2024, 00:00

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/fulldisclosure/2005-08/1074.html - Exploit, Patch, Vendor Advisory () http://archives.neohapsis.com/archives/fulldisclosure/2005-08/1074.html - Exploit, Patch, Vendor Advisory
References () http://secunia.com/advisories/16655 - Vendor Advisory () http://secunia.com/advisories/16655 - Vendor Advisory
References () http://securitytracker.com/id?1014830 - Patch, Vendor Advisory () http://securitytracker.com/id?1014830 - Patch, Vendor Advisory
References () http://www.jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt - Exploit, Patch, Vendor Advisory () http://www.jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt - Exploit, Patch, Vendor Advisory
References () http://www.kb.cert.org/vuls/id/170905 - Patch, Third Party Advisory, US Government Resource () http://www.kb.cert.org/vuls/id/170905 - Patch, Third Party Advisory, US Government Resource
References () http://www.securityfocus.com/bid/14707 - Exploit, Patch () http://www.securityfocus.com/bid/14707 - Exploit, Patch
References () http://www.vupen.com/english/advisories/2005/1596 - () http://www.vupen.com/english/advisories/2005/1596 -
References () https://www.exploit-db.com/exploits/42703/ - () https://www.exploit-db.com/exploits/42703/ -
Information

Published : 2005-09-08 10:03

Updated : 2024-11-21 00:00

NVD link : CVE-2005-2842

Mitre link : CVE-2005-2842

CVE.ORG link : CVE-2005-2842

JSON object : View

Products Affected

dameware_development

  • mini_remote_control_server
CWE
NVD-CWE-Other