DameWare Mini Remote Control 3.x prima 3.74 e 4.x prima di 4.2 trasmette la chiave di crittografia Blowfish in chiaro, che consente agli aggressori remoti di ottenere informazioni sensibili. |
http://www.securityfocus.com/bid/9959 http://marc.info/?l=bugtraq&m=108016344224973&w=2 http://www.dameware.com/support/security/bulletin.asp?ID=SB3 http://www.osvdb.org/4547 http://securitytracker.com/id?1009557 http://secunia.com/advisories/11205 https://exchange.xforce.ibmcloud.com/vulnerabilities/15586 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1852 |
Vulnerabilità: CVE-2004-1852
