CVE-2004-1852

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-03-23 · updated 2026-06-16
Weakness: CWE-319

Description

DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.

Affected products

SolarWinds Dameware Remote Mini Remote Client Agent Service: from 3.0 before 3.74; from 4.0 before 4.2 — fixed in 3.74, 4.2

How to fix

Upgrade to a fixed version: SolarWinds Dameware Remote Mini Remote Client Agent Service 3.74, 4.2. Check the vendor advisory for mitigations.

References

http://marc.info/?l=bugtraq&m=108016344224973&w=2
http://secunia.com/advisories/11205
http://securitytracker.com/id?1009557
http://www.dameware.com/support/security/bulletin.asp?ID=SB3
http://www.osvdb.org/4547
http://www.securityfocus.com/bid/9959
https://exchange.xforce.ibmcloud.com/vulnerabilities/15586
http://marc.info/?l=bugtraq&m=108016344224973&w=2
http://secunia.com/advisories/11205
http://securitytracker.com/id?1009557
http://www.dameware.com/support/security/bulletin.asp?ID=SB3
http://www.osvdb.org/4547

Get alerted when CVE-2004-1852 or the next vulnerability affects your stack