Exploitation Summary
EIP tracks 3 public exploits for CVE-2008-1661.
PoCs published by Metasploit, ri0t, including Metasploit module exploits/windows/misc/doubletake.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in the authentication mechanism of DoubleTake/HP StorageWorks Storage Mirroring Service. It uses a SEH-based payload to achieve remote code execution on vulnerable versions.
Description
Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request.
Exploits (3)
This exploit targets a stack buffer overflow in the authentication mechanism of DoubleTake/HP StorageWorks Storage Mirroring Service. It uses a SEH-based payload to achieve remote code execution on vulnerable versions.
This exploit targets a stack overflow vulnerability in NSI Doubletake (also rebranded as HP StorageWorks) during authentication. It uses a SEH overwrite technique with a custom XOR-encoded payload to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in the authentication mechanism of NSI DoubleTake/HP StorageWorks Storage Mirroring Service. It sends a crafted packet with an XOR-encoded payload to trigger the vulnerability and achieve remote code execution.