CyberSec.Space Logo
Back to CVE Browser

CVE-2008-1491

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1760%
EPSS Percentile17.10th
PublishedMar 25, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623.

Affected Platforms (CPE)

📦
Asus

Remote Console

= 2.0.0.19
📦
Asus

Remote Console

= 2.0.0.24

References & Advisories

🔗 http://aluigi.altervista.org/adv/asuxdpc-adv.txt
🔗 http://secunia.com/advisories/29402
🔗 http://securityreason.com/securityalert/3771
🔗 http://www.securityfocus.com/archive/1/489966/100/0/threaded
🔗 http://www.securityfocus.com/bid/28394
🔗 http://www.vupen.com/english/advisories/2008/0982/references
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41358
🔗 https://www.exploit-db.com/exploits/5694

Related Vulnerabilities

CVE-2001-125210.0

Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface ...

CVE-2000-096910.0

Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary comm...

CVE-2017-1445910.0

An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Ind...

CVE-2006-389210.0

The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak authentication, w...