* Clicking connect led to a remote crash of the application server. * i accidently pasted in a large string of text instead of my username. * Discovery: i discovered this while using the dameware mini remote control client. * of the Mini Remote Client Agent Service (dwrcs.exe). * Details: Affected versions will be any ver in above 4.0 and prior to 4.9 * You can download the latest version of your DameWare Development Product at * Patch: Download version 4.9.0 or later and install over your existing installation. * The vulnerability is caused by insecure calls to the lstrcpyA function when checking the username. * An attacker can construct a specialy crafted packet and exploit this vulnerability.

* By default (DameWare Remote Control Server) DWRCS listens on port 6129 TCP. * who can access the DameWare Mini Remote Control Server. * A buffer overflow vulnerability can be exploited remotely by an unauthenticated attacker * Inactivity control, TCP only, Service Installation and Ping.' * Some additional features include View Only, Cursor control, Remote Clipboard, Performance Settings, * and is able to be run as both an application and a service. * DameWare Mini Remote Control is capable of using the Windows challenge/response authentication * Developed specifically for the 32-bit Windows environment (Windows 95/98/Me/NT/2000/XP), * external dependencies and machine reboot. * for administrators and help desks for quick and easy deployment without

* DameWare Mini Remote Control is 'A lightweight remote control intended primarily * Another Pre-Authentication Buffer Overflow * DameWare Mini Remote Control Client Agent Service

Dameware remote client