Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the usernam…

1. 2005-08-31 First public exploit (EDB-1190)
2. 2005-09-08 Published

21.12% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).

• EDB-42703 Dameware Mini Remote Control 4.0 - Username Stack Buffer Overflow (Metasploit) remote, 2017-09-13
• EDB-1190 DameWare Mini Remote Control 4.0 < 4.9 - Client Agent Remote Overflow remote, 2005-08-31
• archives.neohapsis.com http://archives.neohapsis.com/archives/fulldisclosure/2005-08/1074.html referenced PoC, tagged "exploit" by a source, unverified
• securityfocus.com http://www.securityfocus.com/bid/14707 referenced PoC, tagged "exploit" by a source, unverified
• jpno5.com http://www.jpno5.com/Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt referenced PoC, tagged "exploit" by a source, unverified

• archives.neohapsis.com /archives/fulldisclosure/2005-08/1074.html

  mailing-list, exploit, patch, vendor-advisory

• securitytracker.com /id?1014830

  vdb-entry, patch, vendor-advisory

• kb.cert.org /vuls/id/170905

  third-party-advisory, patch, us-government-resource

• securityfocus.com /bid/14707

  vdb-entry, exploit, patch

• jpno5.com /Releases/Public/Exploits/Dameware%20Mini%20Remote%20Control%20Exploit/dameware.txt

  exploit, patch, vendor-advisory

• exploit-db.com /exploits/42703/

  exploit

• secunia.com /advisories/16655

  third-party-advisory, vendor-advisory

• vupen.com /english/advisories/2005/1596

  vdb-entry

• CVE List CVE-2005-2842
• NVD CVE-2005-2842

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.