CVE-2008-5297

🗓️ 01 Dec 2008 15:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 69 Views

Buffer overflow in No-IP DUC 2.1.7, allowing remote code execution via crafted response to DNS update request

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2008-5297	18 Nov 200800:00	–	circl
Cvelist	CVE-2008-5297	1 Dec 200815:00	–	cvelist
Debian	[SECURITY] [DSA 1686-1] New no-ip packages fix arbitrary code execution	14 Dec 200820:23	–	debian
Tenable Nessus	Debian DSA-1686-1 : no-ip - buffer overflow	15 Dec 200800:00	–	nessus
Tenable Nessus	GLSA-200901-12 : noip-updater: Execution of arbitrary code	19 Jan 200900:00	–	nessus
Gentoo Linux	noip-updater: Execution of arbitrary code	18 Jan 200900:00	–	gentoo
NVD	CVE-2008-5297	1 Dec 200815:30	–	nvd
OpenVAS	Debian: Security Advisory (DSA-1686-1)	23 Dec 200800:00	–	openvas
OpenVAS	Gentoo Security Advisory GLSA 200901-12 (noip-updater)	20 Jan 200900:00	–	openvas
OpenVAS	No-IP DUC RCE Vulnerability	18 Dec 200800:00	–	openvas

NVD

Node

vitalwerks no-ip_ducRange≤2.1.7

OR

vitalwerks no-ip_ducMatch2.0.3

OR

vitalwerks no-ip_ducMatch2.1

OR

vitalwerks no-ip_ducMatch2.1.5

Source	Link
security	www.security.gentoo.org/glsa/glsa-200901-12.xml
secunia	www.secunia.com/advisories/33610
openwall	www.openwall.com/lists/oss-security/2008/11/21/15
secunia	www.secunia.com/advisories/32761
securityfocus	www.securityfocus.com/bid/32344
secunia	www.secunia.com/advisories/33138
xenomuta	www.xenomuta.tuxfamily.org/exploits/noIPwn3r.c
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/46696
git	www.git.debian.org/
securityreason	www.securityreason.com/securityalert/4672

23 Apr 2026 00:35Current

7.5High risk

Vulners AI Score7.5

CVSS 27.6

EPSS0.15771

cve-2008-5297 buffer overflow no-ip duc remote code execution dns update nvd