Lucene search
+L

1028 matches found

RedHat Linux
RedHat Linux
added 2015/07/21 10:15 a.m.9 views

ntp: vallen in extension fields are not validated

A stack-based buffer overflow was found in the way the NTP autokey protocol was implemented. When an NTP client decrypted a secret received from an NTP server, it could cause that client to crash...

5.8CVSS7.2AI score0.06135EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/07/21 10:15 a.m.12 views

ntp: vallen in extension fields are not validated

A stack-based buffer overflow was found in the way the NTP autokey protocol was implemented. When an NTP client decrypted a secret received from an NTP server, it could cause that client to crash...

7.2AI score
SaveExploits0References5
CNVD
CNVD
added 2015/07/12 12:00 a.m.6 views

NTP Denial of Service Vulnerability

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. NTP has an unspecified security vulnerability that could be exploited by a remote attacker to submit a special request that would crash the service program and cause a denial-of-service attack...

5.3CVSS7AI score0.03821EPSS
SaveExploits0References1
exploitpack
exploitpack
added 2015/07/10 12:00 a.m.32 views

NTPD - MON_GETLIST Query Amplification Denial of Service

NTPD - MONGETLIST Query Amplification Denial of Service !/usr/bin/perl ntp MONGETLIST query amplification ddos Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg A Network Time Protocol NTP Amplification attack is an emergin...

SaveExploits0
Exploit DB
Exploit DB
added 2015/07/10 12:00 a.m.38 views

NTPD - MON_GETLIST Query Amplification Denial of Service

!/usr/bin/perl ntp MONGETLIST query amplification ddos Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg A Network Time Protocol NTP Amplification attack is an emerging form of Distributed Denial of Service DDoS that relies...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2015/07/09 12:00 a.m.47 views

NTP MON_GETLIST Query Amplification DDoS

!/usr/bin/perl ntp MONGETLIST query amplification ddos Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg A Network Time Protocol NTP Amplification attack is an emerging form of Distributed Denial of Service DDoS that relies...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/07/02 12:00 a.m.46 views

AIX 7.1 TL 0 : ntp4 (IV71096)

https://vulners.com/cve/CVE-2014-9297 Network Time Protocol NTP Project NTP daemon ntpd could allow a remote attacker to conduct spoofing attacks, caused by insufficient entropy in PRNG. An attacker could exploit this vulnerability to spoof the IPv6 address ::1 to bypass ACLs and launch further...

4.3CVSS6.4AI score0.00902EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2015/07/02 12:00 a.m.70 views

AIX 6.1 TL 6 : ntp4 (IV71094)

https://vulners.com/cve/CVE-2014-9297 Network Time Protocol NTP Project NTP daemon ntpd could allow a remote attacker to conduct spoofing attacks, caused by insufficient entropy in PRNG. An attacker could exploit this vulnerability to spoof the IPv6 address ::1 to bypass ACLs and launch further...

4.3CVSS6.4AI score0.00902EPSS
SaveExploits0References3
IBM AIX
IBM AIX
added 2015/06/29 10:00 a.m.103 views

Vulnerabilities in NTPv4 affect AIX,Vulnerabilities in NTPv4 affect VIOS

IBM SECURITY ADVISORY First Issued: Mon Jun 29 10:00:16 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntp4advisory.asc https://aix.software.ibm.com/aix/efixes/security/ntp4advisory.asc...

4.3CVSS7AI score0.00902EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/06/19 12:00 a.m.41 views

Network Time Protocol Daemon (ntpd) Information Disclosure

Binary data ntpcve-2014-9297.nbin...

7.8AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:00 a.m.6 views

The vulnerability of the microprogramming software of the Cisco Unified Communications Manager allows a remote attacker to execute arbitrary code.

Buffer overflows occur when performing functions like cryptorecv when Autokey Authentication is used, ctlputdata, and configure. This allows a malicious attacker to execute arbitrary code by sending specially crafted NTP packets...

7.5CVSS8AI score0.7809EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:00 a.m.6 views

The vulnerability of the microprogramming software of the Cisco Unified Communications Manager allows a remote attacker to gain unauthorized access to the device.

The function for receiving messages in the ntpproto.c file continues to operate even after an error message is displayed. This allows a remote attacker to gain unauthorized access to the device using specially crafted packets...

5CVSS6.5AI score0.16161EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2015/06/02 12:00 a.m.8 views

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The ntp-4.2.6p5 package of the Red Hat Enterprise Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

7.5CVSS6.8AI score0.7809EPSS
SaveExploits4References5
Fedora
Fedora
added 2015/04/28 1:01 p.m.53 views

[SECURITY] Fedora 21 Update: ntp-4.2.6p5-30.fc21

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

7.5CVSS1.3AI score0.7809EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.8 views

The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol allows a attacker to cause a service failure.

The vulnerability of the ntpd implementation of the Network Time Synchronization protocol is related to insufficient control over the amount of network messages transmitted. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted REQMONGETLIST...

5CVSS6.8AI score0.97549EPSS
SaveExploits23References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.6 views

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the ntp package up to version 4.2.8 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

7.5CVSS6.7AI score0.7809EPSS
SaveExploits4References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.11 views

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the integrity and accessibility of protected information

The multiple vulnerabilities in the ntp package up to version 4.2.4p6 of the Gentoo Linux operating system can lead to the compromise of the integrity and accessibility of protected information. These vulnerabilities can be exploited remotely...

5.8CVSS7.1AI score0.05146EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.10 views

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the integrity and accessibility of protected information.

The vulnerability of the ntp package up to version 4.2.4p7-r1 of the Gentoo Linux operating system can lead to the compromise of the integrity and accessibility of protected information. This vulnerability can be exploited remotely...

6.4CVSS7.1AI score0.32059EPSS
SaveExploits3References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.10 views

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The ntp-4.1.2 package of the CentOS operating system has multiple vulnerabilities. Exploiting these vulnerabilities can lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

6.8CVSS6.5AI score0.32059EPSS
SaveExploits4References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.11 views

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities of the ntp-debuginfo-4.2.2p1 package for the CentOS operating system may lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...

7.5CVSS7.5AI score0.7809EPSS
SaveExploits3References4Affected Software1
Rows per page
Query Builder