CVEvulnerability
CVE-2008-2747
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2008-06-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values.
Affected configurations
• no-ip dynamic update client 2.2.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://secunia.com/advisories/30714 Vendor Advisory
- http://securityreason.com/securityalert/3952 securityreason.com
- http://www.securityfocus.com/archive/1/493367/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29758 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43298 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/30714 Vendor Advisory
- http://securityreason.com/securityalert/3952 securityreason.com
- http://www.securityfocus.com/archive/1/493367/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29758 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43298 exchange.xforce.ibmcloud.com