CVE-2008-5297 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-5297
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-5297

Description: Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/46696 SREASON http://securityreason.com/securityalert/4672 SAID Secunia Advisory: SA32761 Secunia Advisory: SA33610 Secunia Advisory: SA33138 MLIST http://www.openwall.com/lists/oss-security/2008/11/21/15 MISC http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c MILW0RM http://www.milw0rm.com/exploits/7151 GENTOO http://security.gentoo.org/glsa/glsa-200901-12.xml DEBIAN http://www.debian.org/security/2008/dsa-1686 CONFIRM http://git.debian.org/?p=collab-maint/no-ip.git;a=commit;h=60ed93621ff36d9731ba5d9f9336d6eb91122302 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506179 BID 32344

Return to the previous page.