Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

no-ip: arbitrary code execution

Package(s):

no-ip

CVE #(s):

CVE-2008-5297

Created:

December 15, 2008

Updated:

January 19, 2009

Description:

From the Debian advisory:

A buffer overflow has been discovered in the HTTP parser of the No-IP.com Dynamic DNS update client, which may result in the execution of arbitrary code.

Alerts:

Debian	DSA-1686-1	2008-12-14
Gentoo	200901-12	2009-01-18

(Log in to post comments)