VulnerabilityModified

CVE-2004-1852

DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.

MEDIUM 5.0EPSS 0.84%

Does this matter?

Lower severity and a low EPSS score (0.84%). Track it; it rarely justifies an emergency change on its own.

Description

DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 0.84% probability · 56th percentile
CISA KEV: Not listed
Weakness: CWE-319
Affected: solarwinds/dameware mini remote control
Source: cve@mitre.org

References

http://marc.info/?l=bugtraq&m=108016344224973&w=2Mailing List, Third Party Advisory
http://secunia.com/advisories/11205Broken Link, Patch, Vendor Advisory
http://securitytracker.com/id?1009557Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.dameware.com/support/security/bulletin.asp?ID=SB3Product, Vendor Advisory
http://www.osvdb.org/4547Broken Link, Vendor Advisory
http://www.securityfocus.com/bid/9959Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15586Third Party Advisory, VDB Entry
http://marc.info/?l=bugtraq&m=108016344224973&w=2Mailing List, Third Party Advisory
http://secunia.com/advisories/11205Broken Link, Patch, Vendor Advisory
http://securitytracker.com/id?1009557Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.dameware.com/support/security/bulletin.asp?ID=SB3Product, Vendor Advisory
http://www.osvdb.org/4547Broken Link, Vendor Advisory
http://www.securityfocus.com/bid/9959Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15586Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.