Design/Logic Flaw

🗓️ 08 Apr 2015 10:59:00Reported by PRIOn knowledge baseType

prion

prion🔗 www.prio-n.com👁 20 Views

Symmetric-key feature in ntp_proto.c poses man-in-the-middle attack ris

Reporter	Title	Published	Views	Family All 150
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTP affect IBM Security Network Protection (CVE-2015-1798, CVE-2015-1799, and CVE-2015-3405)	16 Jun 201821:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager for Mobile is affected by multiple NTP vulnerabilities	16 Jun 201821:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance	17 Jun 201822:33	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability with ntpd affects IBM Flex System Manager (CVE-2015-1799)	18 Jun 201801:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Network Time Protocol (NTP) affect PowerKVM	18 Jun 201801:30	–	ibm
IBM Security Bulletins	Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager Virtual Appliance available	16 Jun 201821:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Smart Analytics System 7600, 7700, 7710 and IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in Network Time Protocol	18 Oct 201903:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in ntp affect Power Hardware Management Console (CVE-2015-1798 CVE-2015-1799 CVE-2015-3405)	23 Sep 202101:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU C Library (glibc), OpenSSL and NTP affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:10	–	ibm

Source	Link
bugs	www.bugs.ntp.org/show_bug.cgi
support	www.support.ntp.org/bin/view/Main/SecurityNotice
kb	www.kb.cert.org/vuls/id/374268
tools	www.tools.cisco.com/security/center/viewAlert.x
securitytracker	www.securitytracker.com/id/1032031
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd
mandriva	www.mandriva.com/security/advisories
listengine	www.listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html
debian	www.debian.org/security/2015/dsa-3222
debian	www.debian.org/security/2015/dsa-3223

05 Jan 2018 02:30Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.00729

symmetric-key ntp_proto.c ntp 4.x denial of service synchronization loss man-in-the-middle