Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2008-5297

Description

Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function.

POC

Reference

- http://securityreason.com/securityalert/4672

- https://www.exploit-db.com/exploits/7151

Github

No PoCs found on GitHub currently.