The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the username and password in cleartext in memory, which could allow attackers to obtain sensitive information.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dameware_nt_utilities | Dameware_development | * | 4.9 (including) |
| Miniremote_control | Dameware_development | * | 4.9 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=111358825101305\u0026w=2
- http://securitytracker.com/id?1013725
- http://www.osvdb.org/15275
- http://www.shellsec.net/leer_advisory.php?id=7
- http://marc.info/?l=bugtraq\u0026m=111358825101305\u0026w=2
- http://securitytracker.com/id?1013725
- http://www.osvdb.org/15275
- http://www.shellsec.net/leer_advisory.php?id=7