2008-06-18 19:00:00
mitre
PUBLISHED
No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLMSOFTWAREVitalwerksDUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values.