CVE ID:	CVE-2008-5297
Description:	Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function.
Test IDs:	1.3.6.1.4.1.25623.1.0.62956   1.3.6.1.4.1.25623.1.0.63228   1.3.6.1.4.1.25623.1.0.800084
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5297 BugTraq ID: 32344 http://www.securityfocus.com/bid/32344 Debian Security Information: DSA-1686 (Google Search) http://www.debian.org/security/2008/dsa-1686 https://www.exploit-db.com/exploits/7151 http://security.gentoo.org/glsa/glsa-200901-12.xml http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c http://www.openwall.com/lists/oss-security/2008/11/21/15 http://secunia.com/advisories/32761 http://secunia.com/advisories/33138 http://secunia.com/advisories/33610 http://securityreason.com/securityalert/4672 XForce ISS Database: dducl-httpresponse-bo(46696) https://exchange.xforce.ibmcloud.com/vulnerabilities/46696