cve/2008/CVE-2008-5297.md

CVE-2008-5297

Description

Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function.

POC

Reference

• http://securityreason.com/securityalert/4672
• https://www.exploit-db.com/exploits/7151

Github

No PoCs found on GitHub currently.