Lucene search

K
nessusThis script is Copyright (C) 2015-2024 and is owned by Tenable, Inc. or an Affiliate thereof.NTP_CVE-2014-9297.NBIN
HistoryJun 19, 2015 - 12:00 a.m.

Network Time Protocol Daemon (ntpd) Information Disclosure

2015-06-1900:00:00
This script is Copyright (C) 2015-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
22

The remote NTP server is affected by an information disclosure vulnerability due to improper validation of the ‘vallen’ value in extension fields in ‘ntp_crypto.c’. This allows a remote attacker to disclose sensitive information.

Note that this plugin requires both the scanner IP and target IP to not go through Network Address Translation (NAT) when communicating with each other.

Binary data ntp_cve-2014-9297.nbin
VendorProductVersionCPE
ntpntpcpe:/a:ntp:ntp