Lucene search

MitreCVE-2015-7976

HistoryJan 30, 2017 - 9:59 p.m.

CVE-2015-7976

2017-01-3021:59:00

CWE-254

mitre

web.nvd.nist.gov

118

ntp

cve-2015-7976

saveconfig command

security vulnerability

special characters

crafted filename

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

5.6

Confidence

High

EPSS

0.004

Percentile

73.5%

JSON

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

Affected configurations

Nvd

Node

ntpntpMatch4.1.2

Node

ntpntpRange≤4.2.8p5

Node

ntpntpMatch4.3.0

ntpntpMatch4.3.1

ntpntpMatch4.3.2

ntpntpMatch4.3.3

ntpntpMatch4.3.4

ntpntpMatch4.3.5

ntpntpMatch4.3.6

ntpntpMatch4.3.7

ntpntpMatch4.3.8

ntpntpMatch4.3.9

ntpntpMatch4.3.10

ntpntpMatch4.3.11

ntpntpMatch4.3.12

ntpntpMatch4.3.13

ntpntpMatch4.3.14

ntpntpMatch4.3.15

ntpntpMatch4.3.16

ntpntpMatch4.3.17

ntpntpMatch4.3.18

ntpntpMatch4.3.19

ntpntpMatch4.3.20

ntpntpMatch4.3.21

ntpntpMatch4.3.22

ntpntpMatch4.3.23

ntpntpMatch4.3.24

ntpntpMatch4.3.25

ntpntpMatch4.3.26

ntpntpMatch4.3.27

ntpntpMatch4.3.28

ntpntpMatch4.3.29

ntpntpMatch4.3.30

ntpntpMatch4.3.31

ntpntpMatch4.3.32

ntpntpMatch4.3.33

ntpntpMatch4.3.34

ntpntpMatch4.3.35

ntpntpMatch4.3.36

ntpntpMatch4.3.37

ntpntpMatch4.3.38

ntpntpMatch4.3.39

ntpntpMatch4.3.40

ntpntpMatch4.3.41

ntpntpMatch4.3.42

ntpntpMatch4.3.43

ntpntpMatch4.3.44

ntpntpMatch4.3.45

ntpntpMatch4.3.46

ntpntpMatch4.3.47

ntpntpMatch4.3.48

ntpntpMatch4.3.49

ntpntpMatch4.3.50

ntpntpMatch4.3.51

ntpntpMatch4.3.52

ntpntpMatch4.3.53

ntpntpMatch4.3.54

ntpntpMatch4.3.55

ntpntpMatch4.3.56

ntpntpMatch4.3.57

ntpntpMatch4.3.58

ntpntpMatch4.3.59

ntpntpMatch4.3.60

ntpntpMatch4.3.61

ntpntpMatch4.3.62

ntpntpMatch4.3.63

ntpntpMatch4.3.64

ntpntpMatch4.3.65

ntpntpMatch4.3.66

ntpntpMatch4.3.67

ntpntpMatch4.3.68

ntpntpMatch4.3.69

ntpntpMatch4.3.70

ntpntpMatch4.3.71

ntpntpMatch4.3.72

ntpntpMatch4.3.73

ntpntpMatch4.3.74

ntpntpMatch4.3.75

ntpntpMatch4.3.76

ntpntpMatch4.3.77

ntpntpMatch4.3.78

ntpntpMatch4.3.79

ntpntpMatch4.3.80

ntpntpMatch4.3.81

ntpntpMatch4.3.82

ntpntpMatch4.3.83

ntpntpMatch4.3.84

ntpntpMatch4.3.85

ntpntpMatch4.3.86

ntpntpMatch4.3.87

ntpntpMatch4.3.88

ntpntpMatch4.3.89

Node

suselinux_enterprise_debuginfoMatch11sp2

suselinux_enterprise_debuginfoMatch11sp3

suselinux_enterprise_debuginfoMatch11sp4

susemanagerMatch2.1

susemanager_proxyMatch2.1

novellsuse_openstack_cloudMatch5

opensuseleapMatch42.1

opensuseopensuseMatch13.2

suselinux_enterprise_desktopMatch12

suselinux_enterprise_desktopMatch12sp1

suselinux_enterprise_serverMatch10sp4ltss

suselinux_enterprise_serverMatch11sp2ltss

suselinux_enterprise_serverMatch11sp3ltss

suselinux_enterprise_serverMatch11sp4

suselinux_enterprise_serverMatch12sp1

susesuse_linux_enterprise_serverMatch12

VendorProductVersionCPE
ntpntp4.1.2cpe:/a:ntp:ntp:4.1.2:::

Vendor	Product	Version	CPE
ntp	ntp	4.1.2	cpe:/a:ntp:ntp:4.1.2:::

References

lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html

lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html

lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html

lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html

lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html

lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html

lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html

lists.opensuse.org/opensuse-updates/2016-05/msg00114.html

support.ntp.org/bin/view/Main/NtpBug2938

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd

www.securitytracker.com/id/1034782

www.ubuntu.com/usn/USN-3096-1

bto.bluecoat.com/security-advisory/sa113

security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc

security.gentoo.org/glsa/201607-15

security.netapp.com/advisory/ntap-20171031-0001/

www.kb.cert.org/vuls/id/718152

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

5.6

Confidence

High

EPSS

0.004

Percentile

73.5%

JSON

Related for CVE-2015-7976