Filtered by vendor No-ip Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-5369 1 No-ip 1 No-ip2 2024-11-21 N/A
noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file.
CVE-2008-2747 2 Microsoft, No-ip 2 Windows, Dynamic Update Client 2024-11-21 N/A
No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values.
CVE-2024-40457 1 No-ip 1 Duc 2024-10-31 9.1 Critical
No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: the vendor's position is that cleartext in /etc/default/noip-duc is recommended and is the intentional behavior.