Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier including the ipcheck function in dyndnsupdate.c allow remote attackers who spoof a dyndns.org server to execute arbitrary code via unknown vectors.