Exploitation Summary
EIP tracks 3 public exploits for CVE-2008-1491.
PoCs published by Metasploit, Heretic2, including Metasploit module exploits/windows/misc/asus_dpcproxy_overflow.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in Asus Dpcroxy version 2.0.0.19 (up to 2.0.0.24) via TCP port 623. It leverages a crafted payload with NOP sleds, shellcode, and a return address to achieve remote code execution.
Description
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623.
Exploits (3)
This exploit targets a stack buffer overflow in Asus Dpcroxy version 2.0.0.19 (up to 2.0.0.24) via TCP port 623. It leverages a crafted payload with NOP sleds, shellcode, and a return address to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in ASUS DPC Proxy versions 2.0.0.16 and 2.0.0.19. It uses a SEH-based exploitation technique with alphanumeric shellcode to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Asus Dpcproxy version 2.0.0.19 by sending a crafted payload to TCP port 623, achieving remote code execution. The exploit leverages a return address overwrite and includes NOP sleds and shellcode to execute arbitrary commands.