← Database

CVE-2008-5297

HIGH CVSS: 7.6 Published: 2008-12-01 Modified: 2026-06-16

Description

Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function.

Affected Platforms

Vitalwerks No-Ip Duc

Weakness Type

CWE-119

References