DameWare Remote Support < 9 Hotfix 2 / 10 Hotfix 2 DWExporter.exe Buffer Overflow

high Nessus Plugin ID 72742

Language:

Synopsis

An application on the remote host is affected by a buffer overflow vulnerability.

Description

The remote Windows host has a version of DameWare Remote Support prior to 9.0.1 / 10.0.0 Hotfix 2. It is, therefore, affected by a buffer overflow vulnerability due to a flaw in DWExporter.exe. An attacker could potentially exploit this vulnerability to remotely execute arbitrary code.

Solution

Upgrade to 9.0.1 Hotfix 2 / 10.0.0 Hotfix 2 or later.

Plugin Details

Severity: High

ID: 72742

File Name: dameware_remote_support_overflow.nasl

Version: 1.6

Type: local

Agent: windows

Family: Windows

Published: 2/28/2014

Updated: 1/26/2022

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2013-3249

Vulnerability Information

CPE: cpe:/a:dameware:remote_support

Required KB Items: SMB/dameware_remote_support/version, SMB/dameware_remote_support/path

Exploit Ease: No known exploits are available

Patch Publication Date: 5/10/2013

Vulnerability Publication Date: 7/25/2013

Reference Information

CVE: CVE-2013-3249

BID: 61453

IAVA: 2020-A-0392-S

Detections

Analytics