The remote host is missing an update for the 'ntp' package(s) announced via the referenced advisory. ntp has been updated to fix four security issues related to weak RNG seed, improper key generation, ACL bypass, and potential information leak
Reporter | Title | Published | Views | Family All 199 |
---|---|---|---|---|
![]() | SUSE SLES10 Security Update : xntp (SUSE-SU-2015:0322-1) | 20 May 201500:00 | – | nessus |
![]() | SuSE 11.3 Security Update : ntp (SAT Patch Number 10293) | 12 Feb 201500:00 | – | nessus |
![]() | Mandriva Linux Security Advisory : ntp (MDVSA-2015:140) | 30 Mar 201500:00 | – | nessus |
![]() | Fedora 20 : ntp-4.2.6p5-20.fc20 (2015-1759) | 16 Feb 201500:00 | – | nessus |
![]() | Ubuntu 14.04 LTS : NTP vulnerabilities (USN-2497-1) | 10 Feb 201500:00 | – | nessus |
![]() | Amazon Linux AMI : ntp (ALAS-2015-496) | 25 Mar 201500:00 | – | nessus |
![]() | Debian DLA-149-1 : ntp security update | 26 Mar 201500:00 | – | nessus |
![]() | Fedora 21 : ntp-4.2.6p5-27.fc21 (2015-1736) | 16 Feb 201500:00 | – | nessus |
![]() | Mandriva Linux Security Advisory : ntp (MDVSA-2015:046) | 13 Feb 201500:00 | – | nessus |
![]() | Cisco Prime Data Center Network Manager ntpd Multiple Vulnerabilities (uncredentialed check) | 28 May 201500:00 | – | nessus |
# Copyright (C) 2015 Greenbone Networks GmbH
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-or-later
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.850782");
script_version("2021-10-18T09:03:47+0000");
script_tag(name:"last_modification", value:"2021-10-18 09:03:47 +0000 (Mon, 18 Oct 2021)");
script_tag(name:"creation_date", value:"2015-10-13 15:33:05 +0530 (Tue, 13 Oct 2015)");
script_cve_id("CVE-2014-9293", "CVE-2014-9294", "CVE-2014-9297", "CVE-2014-9298");
script_tag(name:"cvss_base", value:"7.5");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
script_tag(name:"qod_type", value:"package");
script_name("SUSE: Security Advisory for ntp (SUSE-SU-2015:0259-1)");
script_tag(name:"summary", value:"The remote host is missing an update for the 'ntp'
package(s) announced via the referenced advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"ntp has been updated to fix four security issues:
* CVE-2014-9294: ntp-keygen used a weak RNG seed, which made it easier
for remote attackers to defeat cryptographic protection mechanisms
via a brute-force attack. (bsc#910764)
* CVE-2014-9293: The config_auth function, when an auth key is not
configured, improperly generated a key, which made it easier for
remote attackers to defeat cryptographic protection mechanisms via a
brute-force attack. (bsc#910764)
* CVE-2014-9298: ::1 can be spoofed on some operating systems, so ACLs
based on IPv6 ::1 addresses could be bypassed. (bsc#910764)
* CVE-2014-9297: vallen is not validated in several places in
ntp_crypto.c, leading to potential information leak. (bsc#910764)
Security Issues:
* CVE-2014-9294
* CVE-2014-9293
* CVE-2014-9298
* CVE-2014-9297");
script_tag(name:"affected", value:"ntp on SUSE Linux Enterprise Server 11 SP3");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_xref(name:"SUSE-SU", value:"2015:0259-1");
script_tag(name:"solution_type", value:"VendorFix");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2015 Greenbone Networks GmbH");
script_family("SuSE Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/suse", "ssh/login/rpms", re:"ssh/login/release=SLES11\.0SP3");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "SLES11.0SP3") {
if(!isnull(res = isrpmvuln(pkg:"ntp", rpm:"ntp~4.2.4p8~1.29.32.1", rls:"SLES11.0SP3"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ntp-doc", rpm:"ntp-doc~4.2.4p8~1.29.32.1", rls:"SLES11.0SP3"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo