Solarwinds Dameware Remote Mini Controller Windows service is vulnerable to stack buffer overflow

Overview

The Solarwinds Dameware Remote Mini Controller Windows service is vulnerable to stack buffer overflow.

Description

CWE-121: Stack-based Buffer Overflow - CVE-2016-2345

Solarwinds Dameware Remote Mini Controller is a software for assisting in remote desktop connections for helpdesk support. According to the reporter, the Solarwinds Dameware Remote Mini Controller Windows service, dwrcs.exe, is vulnerable to stack-based buffer overflow. A remote attacker sending carefully crafted data may be able to obtain private information or execute code. The researcher has published an advisory with more information.

The CERT/CC has not been able to confirm this information with the vendor.

---

Impact

An unauthenticated remote attacker may be able to obtain private information or execute code in the SYSTEM context.

---

Solution

Apply an update

Solarwinds has released version 12.0.3 to address this issue. Affected users should update as soon as possible.

---

Restrict Network Access

As a general good security practice, only allow connections from trusted hosts and networks. Please consult for your firewall product’s manual for more information.

---

Vendor Information

897144

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

SOLARWINDS Unknown

Notified: February 12, 2016 Updated: February 12, 2016

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor References

CVSS Metrics

Group	Score	Vector
Base	6.8	AV:N/AC:M/Au:N/C:P/I:P/A:P
Temporal	5.8	E:POC/RL:U/RC:UR
Environmental	4.4	CDP:ND/TD:M/CR:ND/IR:ND/AR:ND

References

• <https://www.securifera.com/advisories/CVE-2016-2345&gt;
• <http://cwe.mitre.org/data/definitions/121.html&gt;

Acknowledgements

Thanks to Ryan Wincey for reporting this vulnerability.

This document was written by Garret Wassermann.

Other Information

CVE IDs:	CVE-2016-2345
Date Public:	2016-03-17 Date First Published: