612 matches found
ntpd incalid gid usage
Invalid processing of -u parameter causes ntpd to start with invalid gid...
[SA16602] NTP Incorrect Group Permissions Security Issue
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
HP-UX Security patch : PHNE_28002
The remote host is missing HP-UX Security Patch number PHNE28002 . SSRT2370 Sec. Vulnerability with ntpd on HP-UX rev.01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16693;...
HP-UX Security patch : PHNE_24510
The remote host is missing HP-UX Security Patch number PHNE24510 . SSRT2370 Sec. Vulnerability with ntpd on HP-UX rev.01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16915;...
Debian DSA-045-2 : ntpd - remote root exploit
Przemyslaw Frasunek reported that ntp daemons such as that released with Debian GNU/Linux are vulnerable to a buffer overflow that can lead to a remote root exploit. A previous advisory DSA-045-1 partially addressed this issue, but introduced a potential denial of service attack. This has been...
CVE-2004-0657
CVE-2004-0657 describes an integer overflow in the NTP daemon (NTPd) prior to version 4.0, causing the NTP server to return an incorrect date/time offset when a client asks for a timestamp more than 34 years away from the server’s time. This is a network-facing issue in NTPd; no exploit/vector de...
NTP service vulnerable to internal overflow if date / time offset is greater than 34 years
Overview NTP Network TIme Protocol contains an integer overflow vulnerability that may lead to clients receiving an incorrect date/time offset. Description NTP Network Time Protocol is a method by which client machines can synchronize the local date and time with a reference server. The server wi...
CVE-2001-0414
CVE-2001-0414 is a hardware-independent NTP daemon (ntpd/xntpd) vulnerability. The OpenVAS/Nessus data consistently describe a buffer overflow in ntpd 4.0.99k and earlier triggered by a long readvar argument, leading to remote denial of service and potential arbitrary code execution. Affected com...
CVE-2001-0414
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier aka xntpd and xntp3 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument...
CVE-2001-0414
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier aka xntpd and xntp3 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument...
FreeBSD-SA-01:31.ntpd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:31 Security Advisory FreeBSD, Inc. Topic: ntpd contains potential remote compromise Category: core/ports Module: ntpd Announced: 2001-04-06 Credits: Przemyslaw Frasunek...