Secunia

Two security issues have been reported in No-IP Windows Dynamic Update Client (DUC), which can be exploited by malicious, local users and by malicious people to disclose sensitive information.

1) The application stores user credentials within the Windows registry (HKLM\Software\Vitalwerks\DUC\) without proper permission settings. This can be exploited to disclose e.g. the "Username", "TrayPassword", and "Password" of the DUC user.

2) The application uses a cryptographically weak encryption to protect user credentials when sending a status update to the hosted service.

The security issues are reported in No-IP Windows DUC version 2.2.1. Other versions may also be affected.

Solution
Grant only trusted users access to affected systems.
Further details available in Customer Area

Provided and/or discovered by
1) Charalambous Glafkos and George Nicolaou
2) sinn3r

Changelog
Further details available in Customer Area

Original Advisory
2) http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-052-no-ip-domain-update-client-duc-request-insecure-encoding-algorithm/

Deep Links
Links available in Customer Area