Vulnerabilities > NO IP > Dynamic Update Client

DATE CVE VULNERABILITY TITLE RISK
2008-06-18 CVE-2008-2747 Information Exposure vulnerability in No-Ip Dynamic Update Client 2.2.1
No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values.
local
low complexity
microsoft no-ip CWE-200
2.1