1 matches found
ntp: automatic generation of weak default key in config_auth()
It was found that ntpd automatically generated weak keys for its internal use if no ntpdc request authentication key was specified in the ntp.conf configuration file. A remote attacker able to match the configured IP restrictions could guess the generated key, and possibly use it to send ntpdc...
7.5CVSS7.2AI score0.12978EPSS
SaveExploits1References6
20