Dameware
Encyclopedia
DameWare is the manufacturer of DameWare NT Utilities. Part of this utility collection is DameWare Mini Remote Control. The newest version as of 2011-07-09 is v7.5.6.0.
Windows NT
administration utilities, incorporated within a centralized interface for remote management of Windows server
s and workstations. Most all of the standard utilities are included within DNTU's Explorer-style interface, many of which have been enhanced to provide added functionality, and increase ease of use. DNTU also contains custom NT tools including the DameWare Mini Remote Control program and the Exporter, and also supports the use of standard shell property pages and shell context menus.
, but contains additional features such as the ability to install the server application on-demand, pass-through authentication, and smart card support. Functions such as support for multiple monitor environments, encryption (via Microsoft's Cryptographic Service,) and file transfer are also present. This program is designed for Windows XP, Vista, 7 and Windows Server 2008 operating systems.
in the DameWare code. This security defect was actively used by attackers.
Although this problem was reported as fixed in 2004, a similar problem was reported and confirmed in 2005.
Several additional less-serious vulnerabilities are known.
DameWare NT Utilities
DameWare NT Utilities (sometimes known as DNTU) is an enterprise system management application for Windows NT/2000/XP/2003/Vista/2008/7 which is designed to allow administrators to have control over remote client computers. DNTU provides an integrated collection of MicrosoftMicrosoft
Microsoft Corporation is an American public multinational corporation headquartered in Redmond, Washington, USA that develops, manufactures, licenses, and supports a wide range of products and services predominantly related to computing through its various product divisions...
Windows NT
Windows NT
Windows NT is a family of operating systems produced by Microsoft, the first version of which was released in July 1993. It was a powerful high-level-language-based, processor-independent, multiprocessing, multiuser operating system with features comparable to Unix. It was intended to complement...
administration utilities, incorporated within a centralized interface for remote management of Windows server
Windows Server
Windows Server is a brand name for a group of server operating systems released by Microsoft Corporation. All are part of Microsoft Servers.- Members :This brand includes the following software:* Windows 2000 Server* Windows Server 2003...
s and workstations. Most all of the standard utilities are included within DNTU's Explorer-style interface, many of which have been enhanced to provide added functionality, and increase ease of use. DNTU also contains custom NT tools including the DameWare Mini Remote Control program and the Exporter, and also supports the use of standard shell property pages and shell context menus.
DameWare Mini Remote Control
This program is a remote control software. It is similar to Virtual Network ComputingVirtual Network Computing
In computing, Virtual Network Computing is a graphical desktop sharing system that uses the RFB protocol to remotely control another computer...
, but contains additional features such as the ability to install the server application on-demand, pass-through authentication, and smart card support. Functions such as support for multiple monitor environments, encryption (via Microsoft's Cryptographic Service,) and file transfer are also present. This program is designed for Windows XP, Vista, 7 and Windows Server 2008 operating systems.
Security defects in Dameware
Versions of DameWare Mini Remote Control prior to 2004 could be exploited by an attacker to take over control of a remote machine. The exploit used a buffer overflowBuffer overflow
In computer security and programming, a buffer overflow, or buffer overrun, is an anomaly where a program, while writing data to a buffer, overruns the buffer's boundary and overwrites adjacent memory. This is a special case of violation of memory safety....
in the DameWare code. This security defect was actively used by attackers.
Although this problem was reported as fixed in 2004, a similar problem was reported and confirmed in 2005.
Several additional less-serious vulnerabilities are known.
External links
- http://www.dameware.com/
- http://www.windowsnetworking.com/news/WindowsNetworking-Readers-Choice-Award-Remote-Control-DameWare-NT-Utilities-Jan08.html