CVE-2016-2345

Related Files

DameWare Remote Controller 12.0.0.520 Remote Code Execution

Posted Oct 27, 2017

Authored by Securifera

DameWare Remote Controller versions 12.0.0.520 and below suffer from a remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2016-2345

SHA-256 | 4a4c9ff1d9e13aeac05d41ef0fa4e98e4a4c365f635327661de001c1432585c0

Download | Favorite | View

Solarwinds Dameware Mini Remote Code Execution

Posted Mar 18, 2016

Authored by b0yd

A certain remote message parsing function inside the Dameware Mini Remote Control service does not properly validate the input size of an incoming string before passing it to wsprintfw. As a result, a specially crafted message can overflow into the bordering format field and subsequently overflow the stack frame. Exploitation of this vulnerability does not require authentication and can lead to SYSTEM level privilege on any system running the dwmrcs daemon.

tags | advisory, remote, overflow

advisories | CVE-2016-2345

SHA-256 | 390aaf7607e85e8afb085d15df6d452b7949bc6e25747b8967ebc5477a0bd05b

Download | Favorite | View