CVE-2008-2747

2008-06-18T19:41:00
ID CVE-2008-2747
Type cve
Reporter cve@mitre.org
Modified 2018-10-11T20:42:00

Description

No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values.