high7.5Public exploit code
CVE-2005-2842
Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DameWare Mini Remote Control 4.0 < 4.9 - Client Agent Remote Overflow2005-08-31 · remote · windows · Verified
- Dameware Mini Remote Control 4.0 - Username Stack Buffer Overflow (Metasploit)2017-09-13 · remote · windows
Impact
Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dameware Development | Mini Remote Control Server | Versions 4.0, 4.1.0.0, 4.2.0.0, 4.8 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2005-08/1074.html
- http://secunia.com/advisories/16655
- http://securitytracker.com/id?1014830
- http://www.jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt
- http://www.kb.cert.org/vuls/id/170905
- http://www.securityfocus.com/bid/14707
- http://www.vupen.com/english/advisories/2005/1596
- https://www.exploit-db.com/exploits/42703/
- http://archives.neohapsis.com/archives/fulldisclosure/2005-08/1074.html
- http://secunia.com/advisories/16655
- http://securitytracker.com/id?1014830
- http://www.jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt
- http://www.kb.cert.org/vuls/id/170905
- http://www.securityfocus.com/bid/14707
- http://www.vupen.com/english/advisories/2005/1596
- https://www.exploit-db.com/exploits/42703/