No-ip : Security Vulnerabilities, CVEs, Published In 2008 (Information Leak)
No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values.
Max CVSS
2.1
EPSS Score
0.04%
Published
2008-06-18
Updated
2018-10-11
1 vulnerabilities found