critical10.0Public exploit code
CVE-2008-1491
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to e…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Asus Dpcproxy - Remote Buffer Overflow (Metasploit)2010-06-22 · remote · windows · Verified
- ASUS DPC Proxy 2.0.0.16/19 - Remote Buffer Overflow2008-05-29 · remote · windows · Verified
Impact
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Remote Console | Versions 2.0.0.19, 2.0.0.24 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/asuxdpc-adv.txt
- http://secunia.com/advisories/29402
- http://securityreason.com/securityalert/3771
- http://www.securityfocus.com/archive/1/489966/100/0/threaded
- http://www.securityfocus.com/bid/28394
- http://www.vupen.com/english/advisories/2008/0982/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41358
- https://www.exploit-db.com/exploits/5694
- http://aluigi.altervista.org/adv/asuxdpc-adv.txt
- http://secunia.com/advisories/29402
- http://securityreason.com/securityalert/3771
- http://www.securityfocus.com/archive/1/489966/100/0/threaded
- http://www.securityfocus.com/bid/28394
- http://www.vupen.com/english/advisories/2008/0982/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41358
- https://www.exploit-db.com/exploits/5694