Moderate: Red Hat Security Advisory: ntp security update

Updated ntp packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced ti...

RHEL 4 / 5 : ntp (RHSA-2009:0046)

Updated ntp packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced ti...

Update Protection against Multiple Vendors NTP Mode 7 Denial of Service

A denial of service vulnerability exists in the Network Time Protocol NTP, a product shipped by many vendors. The vulnerability is due to incorrect handling of mode 7 MODEPRIVATE requests. A remote unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted mode 7...

[SECURITY] Fedora 10 Update: ntp-4.2.4p6-1.fc10

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

[SECURITY] Fedora 9 Update: ntp-4.2.4p6-1.fc9

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

FreeBSD Security Advisory (FreeBSD-SA-09:03.ntpd.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:03.ntpd.asc ADV FreeBSD-SA-09:03.ntpd.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:03.ntpd.asc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

DSA-1702-1 ntp - cryptographic weakness

Bulletin has no description...

Low: Red Hat Security Advisory: ntp security update

Updated ntp packages that fix several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a reference time source. The NTP daemon ntpd, when run with the...

CVE-2006-0375

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol NTP server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks...

DEBIAN-CVE-2004-0657

Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time...

CVE-2000-0493

Buffer overflow in Simple Network Time Sync SMTS daemon allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string...

CVE-2000-0493

Buffer overflow in Simple Network Time Sync SMTS daemon allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string...

kill_sntsd.pl

I noticed an uncommon scanf overflow in the Simple Network Time Sync daemon and client version 1.0, tested on Redhat 6.1. I haven't looked into this fully yet, but it looks as tho it could be root comprimising as it sits on a priveledged udp port and seems to coredump, but looks like it only give...

Atrus Trivalie Productions Simple Network Time Sync 1.0 - daemon Buffer Overflow

source: https://www.securityfocus.com/bid/1289/info A scanf overflow has been discovered in the Simple Network Time Sync daemon and client version 1.0. Currently the buffer overflow has been tested on RedHat 6.1. It may be possible to obtain root, although it appears one only has 50 characters to...

Atrus Trivalie Productions Simple Network Time Sync 1.0 - daemon Buffer Overflow

Atrus Trivalie Productions Simple Network Time Sync 1.0 - daemon Buffer Overflow source: https://www.securityfocus.com/bid/1289/info A scanf overflow has been discovered in the Simple Network Time Sync daemon and client version 1.0. Currently the buffer overflow has been tested on RedHat 6.1. It...

Переполнение буфера в simple network time sync

Классическое переполнение буфера при строке длиннее 50 символов...

Vulnerability in SNTS

I noticed an uncommon scanf overflow in the Simple Network Time Sync daemon and client version 1.0, tested on Redhat 6.1. I haven't looked into this fully yet, but it looks as tho it could be root comprimising as it sits on a priveledged udp port and seems to coredump, but looks like it only give...