CVE-2004-1852

DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.

• CWE-319

• http://marc.info/?l=bugtraq&m=108016344224973&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/11205Broken Link, Patch, Vendor Advisory
• http://securitytracker.com/id?1009557Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.dameware.com/support/security/bulletin.asp?ID=SB3Product, Vendor Advisory
• http://www.osvdb.org/4547Broken Link, Vendor Advisory
• http://www.securityfocus.com/bid/9959Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15586Third Party Advisory, VDB Entry
• http://marc.info/?l=bugtraq&m=108016344224973&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/11205Broken Link, Patch, Vendor Advisory
• http://securitytracker.com/id?1009557Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.dameware.com/support/security/bulletin.asp?ID=SB3Product, Vendor Advisory
• http://www.osvdb.org/4547Broken Link, Vendor Advisory
• http://www.securityfocus.com/bid/9959Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15586Third Party Advisory, VDB Entry

Published

Mar 23, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1846Multiple SQL injection vulnerabilities in News Manager Lite …
• CVE-2004-1847News Manager Lite 2.5 allows remote attackers to bypass auth…
• CVE-2004-1848Ipswitch WS_FTP Server 4.0.2 allows remote attackers to caus…
• CVE-2004-1849Multiple cross-site scripting (XSS) vulnerabilities in cPane…
• CVE-2004-1850The Rage 1.01 and earlier allows remote attackers to cause a…
• CVE-2004-1851Dameware Mini Remote Control 4.1.0.0 uses insufficiently ran…
• CVE-2004-1853Buffer overflow in Terminator 3: War of the Machines 1.0 all…
• CVE-2004-1854Buffer overflow in the logging function in Picophone 1.63 an…
• CVE-2004-1855Dark Age of Camelot before 1.68 live patch does not sign the…
• CVE-2004-1856devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.…
• CVE-2004-1857Directory traversal vulnerability in setinfo.hts in HP Web J…
• CVE-2004-1858HP Web Jetadmin 7.5.2546 allows remote attackers to cause a …