CVE-2016-3962-Exploit

CVE-2016-3962, CVE-2016-3989 POC Exploit This is a proof of concept exploit for version V5.30p of the web configuration interface for Meinberg NTP Time Server. This exploit also utilitizes CVE-2016-3989 to escalate to the root user. More details about the vulnerabilities can be found at:...

CVE-2016-3962

CVE-2016-3962 is a remote stack-based buffer overflow in Meinberg NTP Time Server interfaces (IMS-LANTIME M3000/M1000/M500/M900/M600/M400/M300/M200/M100; SyncFire 1100; LCES) prior to firmware 6.20.004. The flaw allows crafted POST parameters to overflow a buffer, potentially leaking information,...

Meinberg NTP Time Server Vulnerabilities

OVERVIEW Independent researcher Ryan Wincey has identified a stack buffer overflow vulnerability and a privilege escalation vulnerability in Meinberg’s NTP Time Servers Interface. Meinberg has produced a new Version 6.20.004 to mitigate these vulnerabilities. The researcher has validated the...