#Dameware mini remote control tool software#
#Dameware mini remote control tool windows#

Looking at this process in a debugger, it becomes clear what is happening. Simply using a large number of AвЂ™s (over 2000) or any other character would result in the application terminating unexpectedly. Sometimes it may be necessary to fuzz input fields and parameters, an automated process of entering varying amounts of different characters in sequence in an attempt to identify unexpected behaviour, however this was not the case in this instance. However, for the proof of concept, only one of these fields was used the вЂњHostвЂќ field under the SOCKS Proxy Settings.ДЄs a simple test for this vulnerability, a large number of characters can be entered into the field to observe the results. The majority of these fields lack appropriate input sanitization, leading to crashes when entering a large amount of input (more than 3,000 characters).

#Dameware mini remote control tool windows#

One of the windows (AMT Settings) within in the GUI has several input fields. However, at the time of writing, this version doesnвЂ™t appear to be available from the customer portal and if you are affected by this issue, it is recommended that you request it directly from customer support. Solarwinds have been contacted about this issue who have acknowledged it and have released a version which reportedly contains the fix for the vulnerability, version 12.1. This vulnerability is due to insecure handling of a user input buffer which ultimately allows for overwriting Structured Exception Handler (SEH) addresses and the subsequent hijacking of execution flow.Д«elow is a video demonstration of exploitation for proof of concept of this vulnerability. Having recently completed my OSCE and looking to use some of the skills I picked up there in the real world, I found a local buffer overflow vulnerability in the latest version (at the time of writing) for Dameware MRC (12.0.5) and it has been assigned CVE-2018-12897.

You can often find it among the plethora of toolkits used by system administrators managing the IT infrastructure in organisations. For additional information or assistance regarding Section 508, please contact the Section 508 Office at This entry is not (currently) permitted to be used under any circumstances.Dameware Mini Remote Control (MRC) is a remote administration utility allowing remote access to end user devices for a variety of purposes. Section 508 compliance may be reviewed by the Section 508 Office and appropriate remedial action required if necessary. The Implementer of this technology has the responsibility to ensure the version deployed is 508-compliant. This technology has not been assessed by the Section 508 Office. Prior to use of this technology, users should check with their supervisor, Information Security Officer (ISO), Facility Chief Information Officer (CIO), or local Office of Information and Technology (OI&T) representative to ensure that all actions are consistent with current VA policies and procedures prior to implementation. Users must ensure sensitive data is properly protected in compliance with all VA regulations. Users must ensure their use of this technology/standard is consistent with VA policies and standards, including, but not limited to, VA Handbooks 61 VA Directives 6004, 6513, and 6517 and National Institute of Standards and Technology (NIST) standards, including Federal Information Processing Standards (FIPS). DMRC is also capable of interactive smart card login and remote smart card authentication.

This provides control of a computer regardless of the state of its operating system (OS) allowing rebooting of crashed systems, wake sleeping computers, edit bios settings and remote OS installation.

DMRC also allows connections to computers via remote Kernel-based Virtual Machine (KVM) with built-in support for Intel Active Management Technology (AMT). Remote screens can be shared with end-user and product supports file transfer during sessions. Connections can be via DMRC, Remote Desktop Protocol (RDP - the proprietary protocol developed and used by Microsoft) or Virtual Network Computing (VNC) from a single console. DMRC allows Federal Information Processing Standards (FIPS) 140-2 validated encrypted connections.

#Dameware mini remote control tool software#

More information on the proper use of the TRM can be found on theДameWare Mini Remote Control (DMRC) is remote assistance software for connecting to desktops, laptops and servers to troubleshoot and resolve issues. Technologies must be operated and maintained in accordance with Federal and Department security and