26 matches found
Buffer overflow
Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function...
CVE-2008-5297
Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function...
CVE-2008-5297
The CVE-2008-5297 issue affects the No-IP DUC/no-ip-updater, where the GetNextLine() function in noip2.c lacks a length check, causing a stack-based buffer overflow. This allows a remote attacker to execute arbitrary code by sending a crafted HTTP response to DNS update traffic. Exploitation is c...
MyDNS buffer overflow
Heap buffer overflow on dynamic DNS update request parsing...
Mandrake Linux Security Advisory : dhcp (MDKSA-2002:037)
Fermin J. Serna discovered a problem in the dhcp server and client package from versions 3.0 to 3.0.1rc8, which are affected by a format string vulnerability that can be exploited remotely. By default, these versions of DHCP are compiled with the dns update feature enabled, which allows DHCP to...
ISC DHCPD contains format string vulnerability when logging DNS-update requests
Overview The DHCP daemon DHCPD is a server that is used to allocate network addresses and assign configuration parameters to dynamically configured hosts. A format string vulnerability may permit an intruder to execute code with the privileges of the DHCP daemon typically root. Description The...