[SECURITY] [DSA 801-1] New ntp packages fix group id confusion

-------------------------------------------------------------------------- Debian Security Advisory DSA 801-1 [email protected] http://www.debian.org/security/ Martin Schulze September 5th, 2005 http://www.debian.org/security/faq -...

USN-175-1: ntp server vulnerability

Thomas Biege discovered a flaw in the privilege dropping of the NTP server. When ntpd was configured to drop root privileges, and the group to run under was specified as a name as opposed to a numeric group ID, ntpd changed to the wrong group. Depending on the actual group it changed to, this cou...

NTP Server Protocol Version 3 Detection

Binary data 1148.prm...

NTP Server Protocol Version 2 Detection

Binary data 1149.prm...

NTP Server Protocol Version 2 Detection

Binary data 1151.prm...

NTP Server Protocol Version 1 Detection

Binary data 1150.prm...

NTP Server Protocol Version 1 Detection

Binary data 1146.prm...

NTP Server Protocol Version 3 Detection

Binary data 1144.prm...

Network Time Protocol Daemon (ntpd) readvar Variable Overflow RCE

The remote NTP server is affected by a buffer overflow condition due to improper bounds checking on the 'readvar' argument. An unauthenticated, remote attacker can exploit this, via a specially crafted request that uses an overly long argument, to execute arbitrary code with root privileges. C...