OSVDB ID: 86828

Title: Xtreme RAT Client Password Character Restriction Weakness

Info

Disclosure

Oct 12, 2012

Discovery

Unknown

Dates

Exploit

Oct 12, 2012

Solution

Unknown

Description

Xtreme RAT contains a flaw that is due to the program only allowing the use of digits for passwords. This limits the potential complexity passwords, allowing remote attackers to more easily conduct brute force attacks.

Classification

Location: Context Dependent
Attack Type: Cryptographic
Impact: Loss of Integrity
Solution: Workaround
Exploit: Exploit Public
Disclosure: Uncoordinated Disclosure

Solution

The presence of this software means the host system may have been compromised through some other exploit/vulnerability. If this software was not installed by the legitimate administrator, the only way to ensure the software, and any other malicious software (malware), is completely removed is to re-install the operating system.

Products

Xtreme RAT

Xtreme RAT Client

Unspecified

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/86828