Description
DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.
References
- http://www.dameware.com/support/security/bulletin.asp?ID=SB3
- 20040323 Dameware Passes Weak File Encryption Key in the Clear mailing-list
- dameware-encryption-key-plaintext(15586) vdb-entry
- 1009557 vdb-entry
- 4547 vdb-entry
- 11205 third-party-advisory
- 9959 vdb-entry