CVE-2004-1852

DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://marc.info/?l=bugtraq&m=108016344224973&w=2	Mailing List Third Party Advisory
http://secunia.com/advisories/11205	Broken Link Patch Vendor Advisory
http://securitytracker.com/id?1009557	Broken Link Third Party Advisory VDB Entry Vendor Advisory
http://www.dameware.com/support/security/bulletin.asp?ID=SB3	Product Vendor Advisory
http://www.osvdb.org/4547	Broken Link Vendor Advisory
http://www.securityfocus.com/bid/9959	Broken Link Patch Third Party Advisory VDB Entry Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15586	Third Party Advisory VDB Entry
http://marc.info/?l=bugtraq&m=108016344224973&w=2	Mailing List Third Party Advisory
http://secunia.com/advisories/11205	Broken Link Patch Vendor Advisory
http://securitytracker.com/id?1009557	Broken Link Third Party Advisory VDB Entry Vendor Advisory
http://www.dameware.com/support/security/bulletin.asp?ID=SB3	Product Vendor Advisory
http://www.osvdb.org/4547	Broken Link Vendor Advisory
http://www.securityfocus.com/bid/9959	Broken Link Patch Third Party Advisory VDB Entry Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15586	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:solarwinds:dameware_mini_remote_control::::::::
	cpe:2.3:a:solarwinds:dameware_mini_remote_control::::::::

History

No history.

Information

Published : 2004-03-23 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2004-1852

Mitre link : CVE-2004-1852

CVE.ORG link : CVE-2004-1852

JSON object : View

Products Affected

solarwinds

dameware_mini_remote_control

CWE

CWE-319

Cleartext Transmission of Sensitive Information

{"id": "CVE-2004-1852", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-03-23T05:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=108016344224973&w=2", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/11205", "tags": ["Broken Link", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1009557", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.dameware.com/support/security/bulletin.asp?ID=SB3", "tags": ["Product", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/4547", "tags": ["Broken Link", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/9959", "tags": ["Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15586", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=108016344224973&w=2", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/11205", "tags": ["Broken Link", "Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1009557", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.dameware.com/support/security/bulletin.asp?ID=SB3", "tags": ["Product", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/4547", "tags": ["Broken Link", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/9959", "tags": ["Broken Link", "Patch", "Third Party Advisory", "VDB Entry", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15586", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:solarwinds:dameware_mini_remote_control:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7EC239C-1358-4A4F-A7D6-34B715B241D8", "versionEndExcluding": "3.74", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:solarwinds:dameware_mini_remote_control:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49B9CA37-16F3-4847-9DA5-14BB582582F7", "versionEndExcluding": "4.2", "versionStartIncluding": "4.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}