NetSight
IP …
high7.6Public exploit code

CVE-2008-5297

Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function.

Affected products

VendorProductAffected versions
VitalwerksNo-Ip Duc
through 2.1.7
Versions 2.0.3, 2.1, 2.1.5

Weakness classification

CWE-119

References