Secunia

Jackson Pollocks No5 has discovered a vulnerability in DameWare Mini Remote Control, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error when handling an overly long user ID. This can be exploited to cause a stack-based buffer overflow and allows execution of arbitrary code.

The vulnerability may be related to:
SA10439

The vulnerability has been confirmed in version 4.8.0.3, and has been reported to affect all versions above 4.0 and prior to 4.9.0.

Solution
The vulnerability has reportedly been fixed in version 4.9.0 or later.

Provided and/or discovered by
Jackson Pollocks No5

Changelog
Further details available in Customer Area

Original Advisory
http://www.jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area