DameWare Remote Desktop Listener

medium Nessus Network Monitor Plugin ID 2829

Synopsis

The remote host is running Dameware, a utility that allows administrators remote access to the Windows Desktop via a number of different protocols.

Description

The remote host is running Dameware, a utility that allows administrators remote access to the Windows Desktop via a number of different protocols. There have been many flaws in Dameware and even one backdoor (Agobot) that uses Dameware as an attack vector for further propagation.

Solution

Ensure that Dameware is authorized for your environment and that Dameware has been upgraded to the most recent version.

Plugin Details

Severity: Medium

ID: 2829

Family: Generic

Published: 4/14/2005

Updated: 6/1/2015