Danware NetOp Remote Control Information Disclosure Vulnerability

BID:11710

Info

Danware NetOp Remote Control Information Disclosure Vulnerability

Bugtraq ID: 11710
Class: Design Error
CVE: CVE-2004-0950
Remote: Yes
Local: No
Published: Nov 19 2004 12:00AM
Updated: Jul 12 2009 08:06AM
Credit: Martin O'Neal <[email protected]> of Corsaire Security disclosed this vulnerability.
Vulnerable: Danware Data NetOp 7.60 build 2003246
Danware Data NetOp 7.50 build 2003048
Danware Data NetOp 7.0 1 build 2002291
Danware Data NetOp 6.50
- Microsoft Windows 3.11
 - Microsoft Windows 3.11
 - Microsoft Windows 3.1
 - Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT 4.0
 Danware Data NetOp 6.0
- Microsoft Windows 3.11
 - Microsoft Windows 3.11
 - Microsoft Windows 3.1
 - Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT 4.0
Not Vulnerable: Danware Data NetOp 7.65 build 2004317
Danware Data NetOp 7.65 build 2004278

Discussion

Danware NetOp Remote Control Information Disclosure Vulnerability

It is reported that NetOp Remote Control is susceptible to an information disclosure vulnerability.

This vulnerability reportedly allows remote attackers to discern the name of the user that is logged in and the internal IP address and hostname of the targeted computer. This information may aid malicious users in further attacks.

Versions prior to 7.65 build 2004278 are reported vulnerable to this issue.

Exploit / POC

Danware NetOp Remote Control Information Disclosure Vulnerability

An exploit is not required.

Solution / Fix

Danware NetOp Remote Control Information Disclosure Vulnerability

Solution:
The vendor has released version 7.65 build 2004278 to address this issue. Users still have to configure the software to disable the 'Public Host Name' option to stop the application from disclosing potentially sensitive information.

Please see the referenced 'Modification Notes - Amelioration History' for further information.


Danware Data NetOp 6.0

Danware Data NetOp 6.50

Danware Data NetOp 7.0 1 build 2002291

Danware Data NetOp 7.50 build 2003048

Danware Data NetOp 7.60 build 2003246

References

Danware NetOp Remote Control Information Disclosure Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report