VMSA-2010-0009 : ESXi ntp and ESX Service Console third-party updates

a. Service Console update for COS kernel Updated COS package 'kernel' addresses the security issues that are fixed through versions 2.6.18-164.11.1. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2009-2695, CVE-2009-2908, CVE-2009-3228, CVE-2009-3286,...

Debian DSA-1992-1 : chrony - several vulnerabilities

Several vulnerabilities have been discovered in chrony, a pair of programs which are used to maintain the accuracy of the system clock on a computer. This issues are similar to the NTP security flaw CVE-2009-3563. The Common Vulnerabilities and Exposures project identifies the following problems ...

CVE-2010-0292

The readfromcmdsocket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a...

CVE-2010-0292

The Chrony CVE-2010-0292 issue affects chronyd’s cmdmon path: read_from_cmd_socket in cmdmon.c allows a spoofed cmdmon packet to trigger a loop of NOHOSTACCESS messages between daemons, causing CPU and network resource exhaustion (DoS). Affected releases are Chrony before 1.23.1 and 1.24-pre1. De...

Multiple Vendors NTP Mode 7 Denial of Service (CVE-2009-3563)

The ntpd daemon implements the Network Time Protocol NTP which sets and maintains the system time-of-day in synchronism with Internet standard time servers or other local reference clocks. NTP.org maintains the reference implementation of ntpd that is used by multiple vendors. A denial of service...

SuSE 11 Security Update : ntp (SAT Patch Number 1677)

By sending specially crafted NTP packets attackers could make ntpd flood it's log file with error messages or even run into an endless loop. CVE-2009-3563 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

openSUSE Security Update : ntp (ntp-1728)

By sending specially crafted NTP packets attackers could make ntpd flood it's log file with error messages or even run into an endless loop CVE-2009-3563. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : ntp (ntp-1728)

By sending specially crafted NTP packets attackers could make ntpd flood it's log file with error messages or even run into an endless loop CVE-2009-3563. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

FreeBSD Security Advisory (FreeBSD-SA-10:02.ntpd.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:02.ntpd.asc SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SuSE9 Security Update : xntp (YOU Patch Number 12559)

By sending specially crafted NTP packets attackers could make ntpd flood its log file with error messages or even run into an endless loop CVE-2009-3563. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Fedora Core 11 FEDORA-2009-13090 (ntp)

The remote host is missing an update to ntp announced via advisory FEDORA-2009-13090. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-13121 (ntp)

The remote host is missing an update to ntp announced via advisory FEDORA-2009-13121. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-13121 (ntp)

The remote host is missing an update to ntp announced via advisory FEDORA-2009-13121. OpenVAS Vulnerability Test $Id: fcore200913121.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13121 ntp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora 10 : ntp-4.2.4p7-2.fc10 (2009-13121)

This update fixes possible DoS with mode 7 packets. CVE-2009-3563 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 11 : ntp-4.2.4p7-3.fc11 (2009-13090)

This update fixes possible DoS with mode 7 packets. CVE-2009-3563 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Core 11 FEDORA-2009-13090 (ntp)

The remote host is missing an update to ntp announced via advisory FEDORA-2009-13090. OpenVAS Vulnerability Test $Id: fcore200913090.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13090 ntp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

NTP.org ntpd Reserved Mode Denial of Service

This module exploits a denial of service vulnerability within the NTP network time protocol demon. By sending a single packet to a vulnerable ntpd server Victim A, spoofed from the IP address of another vulnerable ntpd server Victim B, both victims will enter an infinite response loop. Note, unle...

NTP MODE_PRIVATE报文远程拒绝服务漏洞

BUGTRAQ ID: 37255 CVE ID: CVE-2009-3563 NTP（Network Time Protocol）是用于通过网络同步计算机时钟的协议。 ntpdc查询和控制工具使用NTP模式7（MODEPRIVATE），ntpq使用NTP模式6（MODECONTROL），而例程NTP时间传输使用模式1到5。在从非restrict ... noquery或restrict ... ignore网段所列出的地址接收到错误的模式7请求或模式7错误响应时，ntpd会回复模式7出错响应并记录一条消息日志。如果攻击者能够在发送给主机...

[slackware-security] ntp

New ntp packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. If a spoofed mode 7 packet is sent to a vulnerable NTP daemon it may cause CPU and/or disk space exhaustion, resulting in a denial of service. More...

CVE-2009-3563

ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error responses between two NTP daemon...