1028 matches found
NTP MAC Spoofing Vulnerability
NTP Network Time Protocol is a protocol used by clients to synchronize the date and time with a time server. A MAC spoofing vulnerability exists in NTP. Due to NTP4 installation using symmetric key authentication when the unauthenticated code MAC is received. Allows an attacker to exploit the...
DEBIAN-CVE-2015-1799
The symmetric-key feature in the receive function in ntpproto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service synchronization loss by spoofing the...
UBUNTU-CVE-2015-1798
The symmetric-key feature in the receive function in ntpproto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC...
Vulnerabilities Identified in Network Time Protocol Daemon (ntpd)
The Network Time Foundation's NTP Project has released an update addressing multiple vulnerabilities in ntpd. Exploitation of these vulnerabilities may allow an attacker to conduct a man-in-the-middle attack or cause a denial of service condition. Users and administrators are encouraged to review...
FreeBSD Security Advisory FreeBSD-SA-15:07.ntp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:07.ntp Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities of ntp Category: contrib Module: ntp Announced: 2015-04-07 Credits: Network Time...
FreeBSD-SA-15:07.ntp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:07.ntp Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities of ntp Category: contrib Module: ntp Announced: 2015-04-07 Credits: Network Time...
BSA-2015-002
Summary Security Advisory ID : BSA-2015-002 Component : NTP Revision : 7.0 N/A...
Cisco IOS XR Multiple ntpd Vulnerabilities
The remote Cisco device is running a version of IOS XR software that is affected by the following vulnerabilities : - Errors exist related to weak cryptographic pseudorandom number generation PRNG, the functions 'ntprandom' and and 'configauth', and the 'ntp-keygen' utility. A man-in-the-middle...
[SECURITY] Fedora 21 Update: ntp-4.2.6p5-27.fc21
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...
[SECURITY] Fedora 20 Update: ntp-4.2.6p5-20.fc20
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...
NTP 'ntp_crypto.c' Information Disclosure Vulnerability
NTP is a protocol used to synchronize computer time. NTP 'ntpcrypto.c' has an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information...
NTP 'ntp_io.c' Authentication Security Bypass Vulnerability
NTP is a protocol used to synchronize computer time. An authentication security bypass vulnerability exists in NTP 'ntpio.c', which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...
Network Time Protocol (NTP) vulnerability in AIX,Network Time Protocol (NTP) vulnerability in VIOS
IBM SECURITY ADVISORY First Issued: Tue Feb 10 12:06:45 CST 2015 |Updated: Thu Feb 12 10:54:48 CST 2015 |Corrected wrong CVE number |Corrected SP for 7100-02-07 |Updated Fri Feb 13 08:22:03 CST 2015 |Corrected typo in II. CVSS section |Updated Thu Feb 19 12:35:51 CST 2015 |Corrected upper fileset...
[SECURITY] [DLA 149-1] ntp security update
Package : ntp Version : 1:4.2.6.p2+dfsg-1+deb6u2 CVE ID : CVE-2014-9297 CVE-2014-9298 Several vulnerabilities were discovered in the ntp package, an implementation of the Network Time Protocol. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-9297 Steph...
[SECURITY] [DSA 3154-2] ntp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3154-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 07, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3154-2] ntp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3154-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 07, 2015 http://www.debian.org/security/faq -...
DSA-3154-2 ntp - incomplete fix
Bulletin has no description...
DLA-149-1 ntp - security update
Bulletin has no description...
[SECURITY] [DSA 3154-1] ntp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3154-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 05, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3154-1] ntp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3154-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 05, 2015 http://www.debian.org/security/faq -...