ASUS DPC Proxy 2.0.0.16/19 - Remote Buffer Overflow

/ Dreatica-FXP crew ---------------------------------------- Target : ASUS DPC Proxy 2.0.0.16/2.0.0.24 ---------------------------------------- Exploit : ASUS DPC Proxy 2.0.0.16/2.0.0.19 Remote Buffer Overflow Exploit Exploit date : 02.04.2008 Exploit writer : Heretic2 [email protected] OS :...

CVE-2008-1491

Stack-based buffer overflow in the DPC Proxy server DpcProxy.exe in ASUS Remote Console aka ARC or ASMB3 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623...

Stack overflow

Stack-based buffer overflow in the DPC Proxy server DpcProxy.exe in ASUS Remote Console aka ARC or ASMB3 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623...

CVE-2008-1491

CVE-2008-1491 affects the ASUS DpcProxy.exe within ASUS Remote Console (ARC/ASMB3). The vulnerability is a stack-based buffer overflow in the DPC Proxy server, exploitable remotely by sending a long string to TCP port 623, impacting versions 2.0.0.19 and 2.0.0.24. Public references include Exploi...

CVE-2008-1491

Stack-based buffer overflow in the DPC Proxy server DpcProxy.exe in ASUS Remote Console aka ARC or ASMB3 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623...

CVE-2008-1491: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the DPC Proxy server DpcProxy.exe in ASUS Remote Console aka ARC or ASMB3 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623...

ASUS远程控制台DPC代理栈溢出漏洞

BUGTRAQ ID: 28394 ASUS远程控制台（ARC）允许用户监控和控制远程主机。 ARC服务在处理超长的用户请求时存在缓冲溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 ARC服务的主要组件是一个监听于623端口的名为DpcProxy的telnet服务器，可提供IPMI接口。DPC代理用于从客户端所接收数据的函数存在缓冲区溢出漏洞。该函数将所接收的数据存储到了大约1024字节的栈缓冲区，然后检查行分隔符的末尾（回车）。如果用户提交了超长数据的话，就可以触发栈溢出，导致执行任意指令。 0 Asus Remote Console = 2.0.0.24 Asus ----...

Buffer-overflow in ASUS Remote Console 2.0.0.24

Luigi Auriemma Application: ASUS Remote Console http://www.asus.com/999/html/share/9/icon/9/index.htmasmb3 Versions: = 2.0.0.24 Platforms: Windows Bug: buffer overflow Exploitation: remote Date: 21 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3...

Asus Remote Console buffer overflow

Buffer overflow on TCP/623 request parsing...

Asus Dpcproxy Buffer Overflow

This module exploits a stack buffer overflow in Asus Dpcroxy version 2.0.0.19. It should be vulnerable until version 2.0.0.24. Credit to Luigi Auriemma Module Options msf use exploit/windows/misc/asus/dpcproxyoverflow msf undefineddpcproxyoverflow show actions ...actions... msf...

Immunity Canvas: ASUS_SAMBA

Name| asussamba ---|--- CVE| CVE-2007-2446 Exploit Pack| CANVAS Description| SAMBA apilsalookupsids Notes| CVE Name: CVE-2007-2446 VENDOR: Samba Platforms Tested: ASUS EEE with SAMBA 3.24 Date public: 5/15/2007 CVE Url: https://vulners.com/cve/CVE-2007-2446 CVSS: 10.0...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:151)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to and including 2.6.16-rc2, when running on x8664 systems with preemption enabled, local users can cause a DoS oops via multiple ptrace tasks that perform single steps CVE-2006-1066. Prior to 2.6.16, a...

SecureWorks Research Client Advisory: Multiple Vendor Bluetooth Memory Stack Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SecureWorks Research Client Advisory Multiple Vendor Bluetooth Memory Stack Corruption Vulnerability October 11th, 2006 Summary: A flaw exists in the Toshiba Bluetooth wireless device driver, used by multiple vendors, that allows a remote attacker...

CVE-2005-3489

Buffer overflow in Asus Video Security 3.5.0.0 and earlier, when using authorization, allows remote attackers to execute arbitrary code via a long username/password string...

CVE-2005-3490

Directory traversal vulnerability in the web server in Asus Video Security 3.5.0.0 and earlier allows remote attackers to read arbitrary files via "../" or ".." sequences in the URL...

CVE-2005-3490

Directory traversal vulnerability in the web server in Asus Video Security 3.5.0.0 and earlier allows remote attackers to read arbitrary files via "../" or ".." sequences in the URL...

CVE-2005-3490

CVE-2005-3490 affects the web server in Asus Video Security (versions 3.5.0.0 and earlier). The issue is a directory traversal vulnerability that lets remote attackers read arbitrary files by providing directory traversal sequences ("../" or "..\"). The vulnerability arises in the web server comp...

CVE-2005-3489

CVE-2005-3489 : Buffer overflow in Asus Video Security 3.5.0.0 and earlier when using authorization allows remote attackers to execute arbitrary code via a long username/password string. The issue is triggered through crafted login data over the network (no authentication interaction required). A...

CVE-2005-3489: Undefined Security Weakness

Buffer overflow in Asus Video Security 3.5.0.0 and earlier, when using authorization, allows remote attackers to execute arbitrary code via a long username/password string...

CVE-2005-3489

Buffer overflow in Asus Video Security 3.5.0.0 and earlier, when using authorization, allows remote attackers to execute arbitrary code via a long username/password string...