CVE-2004-1851 Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key, which makes it easier for remote attackers to obtain sensitive information via brute force guessing.
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key, which makes it easier for remote attackers to obtain sensitive information via brute force guessing.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dameware development mini remote control server | = 4.1_.0.0 | No fix listed |
References
- 20030323 Dameware Passes Weak File Encryption Key in the Clear mailing-list
- 11205 patch third-party-advisory vendor-advisory
- 1009557 vdb-entry vendor-advisory
- 4547 vdb-entry vendor-advisory
- 9957 vdb-entry vendor-advisory
- dameware-random-generator-weak(15587) vdb-entry