NVD

Id
5075  
Name
CVE-2008-5297  
Description
Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-01  
Modified Date
2009-08-20  
Seq
2008-5297  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
31697 5075 CVE-2008-5297 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506179  View
31698 5075 CVE-2008-5297 http://git.debian.org/?p=collab-maint/no-ip.git;a=commit;h=60ed93621ff36d9731ba5d9f9336d6eb91122302  View
31699 5075 CVE-2008-5297 GLSA-200901-12  View
31700 5075 CVE-2008-5297 4672  View
31701 5075 CVE-2008-5297 DSA-1686  View
31702 5075 CVE-2008-5297 7151  View
31703 5075 CVE-2008-5297 [oss-security] 20081120 CVE request: no-ip DUC buffer overflow  View
31704 5075 CVE-2008-5297 32344  View
31705 5075 CVE-2008-5297 http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c  View
31706 5075 CVE-2008-5297 dducl-httpresponse-bo(46696)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51204 JVNDB-2008-006514 No-IP DUC におけるバッファオーバーフローの脆弱性 No-IP DUC は、GetNextLine 関数の長さチェックが行われない不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2008-5297 35410 CVE-2008-5297 5075 7.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006514.html 2008-12-01 2012-12-20 View