Project

General

Profile

Actions
Copy link

Bug #2585

closed

FreeDNS.afraid.org DDNS client sends in clear text

Added by Anonymous almost 12 years ago. Updated over 9 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Dynamic DNS
Target version:
-
Start date:
08/09/2012
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:
All

Description

FreeDNS.afraid.org DDNS client sends the "Authentication Token" (update URL) in clear text. The FreeDNS.afraid.org website warns of unauthorized access to the update URL.

The code affected in dyndns.class file:

case 'freedns':
$needIP = FALSE;
curl_setopt($ch, CURLOPT_URL, 'http://freedns.afraid.org/dynamic/update.php?' . $this->_dnsPass);

Thanks (and sorry for my bad English).

Actions
Copy link

Also available in: Atom PDF