Title: Xtreme RAT Client Password Character Restriction Weakness
Info
Disclosure
Oct 12, 2012
Discovery
Unknown
Dates
Exploit
Oct 12, 2012
Solution
Unknown
Description
Xtreme RAT contains a flaw that is due to the program only allowing the use of digits for passwords. This limits the potential complexity passwords, allowing remote attackers to more easily conduct brute force attacks.
Classification
Location:
Context Dependent
Attack Type:
Cryptographic
Impact:
Loss of Integrity
Solution:
Workaround
Exploit:
Exploit Public
Disclosure:
Uncoordinated Disclosure
Solution
The presence of this software means the host system may have been compromised through some other exploit/vulnerability. If this software was not installed by the legitimate administrator, the only way to ensure the software, and any other malicious software (malware), is completely removed is to re-install the operating system.