https://insinuator.net/tags/dameware/ Recent content in DameWare on Insinuator.net - Bold Statements Hugo en-us Wed, 05 Oct 2016 00:00:00 +0000 https://insinuator.net/2016/10/dameware-vulnerability/ Wed, 05 Oct 2016 00:00:00 +0000 https://insinuator.net/2016/10/dameware-vulnerability/ <p>In course of a recent research project, I had a look at SolarWinds DameWare, which is a commercial Remote Access Software product running on Windows Server. I identified a remote file download vulnerability in the download function for the client software that can be exploited remotely and unauthenticated and that allows to download arbitrary files from the server that is running the software.</p> <p>A very simple proof of concept HTTP request to download the C:\Windows\win.ini file of the target machine is the following:</p>