Lucene search

K
cve[email protected]CVE-2004-1852
HistoryMay 10, 2005 - 4:00 a.m.

CVE-2004-1852

2005-05-1004:00:00
CWE-319
web.nvd.nist.gov
24
security
vulnerability
dameware
mini remote control
plaintext
blowfish
encryption
transmission
remote attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.3 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.6%

DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.

Affected configurations

NVD
Node
solarwindsdameware_mini_remote_controlRange3.03.74
OR
solarwindsdameware_mini_remote_controlRange4.04.2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.3 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.6%

Related for CVE-2004-1852