← back
CVE-2008-5297

CVE-2008-5297

EPSS 18.5%
Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/7151unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506179http://git.debian.org/?p=collab-maint/no-ip.git%3Ba=commit%3Bh=60ed93621ff36d9731ba5d9f9336d6eb91122302http://secunia.com/advisories/32761http://secunia.com/advisories/33138http://secunia.com/advisories/33610http://security.gentoo.org/glsa/glsa-200901-12.xmlhttp://securityreason.com/securityalert/4672https://exchange.xforce.ibmcloud.com/vulnerabilities/46696https://www.exploit-db.com/exploits/7151http://www.debian.org/security/2008/dsa-1686http://www.openwall.com/lists/oss-security/2008/11/21/15http://www.securityfocus.com/bid/32344