Lucene search
+L

1177 matches found

CNVD
CNVD
added 2016/04/28 12:00 a.m.7 views

ntpd Information Disclosure Vulnerability

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd version 4.x before 4.2.8p7 and version 4.3 before 4.3.92. An attacker could exploit the...

5.3CVSS7.3AI score0.03634EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2016/04/28 12:00 a.m.9 views

PT-2016-4856 · Ntf +7 · Ntp +7

Name of the Vulnerable Software and Affected Versions: NTP versions 4.2.8p4 and earlier NTPSec version aa48d001683e5b791a743ec9c575aaf7d867a2b0c Description: An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-dst timestamp recorded for that...

9.8CVSS6.6AI score0.97549EPSS
SaveExploits60References217
Positive Technologies
Positive Technologies
added 2016/04/28 12:00 a.m.8 views

PT-2016-4855 · Ntp +8 · Ntp +8

Name of the Vulnerable Software and Affected Versions: NTP versions 4.2.8p4 and earlier NTPSec version a5fb34b9cc89b92a8fef2f459004865c93bb7f92 Description: An off-path attacker can cause a preemptible client association to be demobilized by sending a crypto NAK packet to a victim client with a...

9.8CVSS6.7AI score0.97549EPSS
SaveExploits60References240
Positive Technologies
Positive Technologies
added 2016/04/28 12:00 a.m.8 views

PT-2016-4857 · Ntp +8 · Ntp +10

Name of the Vulnerable Software and Affected Versions: ntp versions 4.2.8p4 NTPSec version a5fb34b9cc89b92a8fef2f459004865c93bb7f92 Description: An issue exists in the message authentication functionality of libntp, allowing an attacker to send crafted messages in an attempt to recover the messag...

9.8CVSS6.5AI score0.97549EPSS
SaveExploits60References218
CNVD
CNVD
added 2016/04/28 12:00 a.m.3 views

ntpd Denial of Service Vulnerability (CNVD-2016-02669)

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd version 4.x before 4.2.8p7 and version 4.3 before 4.3.92. An attacker can exploit this...

5.3CVSS7.2AI score0.15081EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/04/28 12:00 a.m.7 views

ntpd Packet Injection Vulnerability

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd version 4.x before 4.2.8p7 and version 4.3 before 4.3.92. An attacker can exploit this...

3.7CVSS7.8AI score0.02233EPSS
SaveExploits1References1
CNVD
CNVD
added 2016/04/28 12:00 a.m.5 views

ntpd Denial of Service Vulnerability (CNVD-2016-02667)

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd version 4.x prior to 4.2.8p7 and version 4.3 prior to 4.3.92. An attacker can exploit this...

7.1CVSS7.7AI score0.08948EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/04/28 12:00 a.m.5 views

ntpd denial of service vulnerability

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd versions 4.x prior to 4.2.8p7 and 4.3 prior to 4.3.92, which stems from the program failing t...

5.9CVSS8AI score0.06865EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2016/04/28 12:00 a.m.12 views

PT-2016-3321 · Ntp +5 · Ntpd +7

Name of the Vulnerable Software and Affected Versions: ntpd versions prior to 4.2.8p4 NTPsec versions prior to a5fb34b9cc89b92a8fef2f459004865c93bb7f92 Description: A malicious authenticated peer can exploit an issue in the clock selection algorithm to modify a victim's clock. The issue is relate...

9.8CVSS6.4AI score0.97549EPSS
SaveExploits61References173
Talos
Talos
added 2016/04/26 12:00 a.m.58 views

Network Time Protocol libntp Message Digest Disclosure Vulnerability

SUMMARY An exploitable vulnerability exists in the message authentication functionality of Network Time Protocol libntp. An attacker can send a series of crafted messages to attempt to recover the message digest key. TESTED VERSIONS ntp 4.2.8p4 NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92...

5.3CVSS0.7AI score0.03634EPSS
SaveExploits1
CNVD
CNVD
added 2016/04/22 12:00 a.m.10 views

NTP ntpq Component Elevation of Privilege Vulnerability

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. An elevation of privilege vulnerability exists in the ntpq component of NTP version 4.2.8p5, which can be exploited by a remote attacker to affect integrity by manipulating the...

4.3CVSS7.8AI score0.03512EPSS
SaveExploits0References1
OSV
OSV
added 2016/04/20 5:59 p.m.5 views

CVE-2016-1384

The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898...

7.5CVSS5.8AI score0.02489EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2016/03/04 12:00 a.m.72 views

AIX NTP Advisory : ntp_advisory5 (IV81129) (IV81130)

A version of the Network Time Protocol NTP package installed on the remote AIX host is affected by an integrity vulnerability due to an improperly implemented threshold limitation for the '-g' option. A man-in-the-middle attacker can exploit this to intercept the NTP traffic and return arbitrary...

7.5CVSS7.6AI score0.0913EPSS
SaveExploits0References2
IBM AIX
IBM AIX
added 2016/02/22 8:06 a.m.168 views

Vulnerability in NTPv4 affects AIX

IBM SECURITY ADVISORY First Issued: Mon Feb 22 08:06:13 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntpadvisory5.asc https://aix.software.ibm.com/aix/efixes/security/ntpadvisory5.asc...

7.5CVSS7.5AI score0.0913EPSS
SaveExploits0
CNVD
CNVD
added 2016/02/08 12:00 a.m.3 views

NTP Denial of Service Vulnerability (CNVD-2016-00895)

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...

5.9CVSS7.7AI score0.06346EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/02/08 12:00 a.m.5 views

NTP Denial of Service Vulnerability (CNVD-2016-00897)

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that allows a remote attacker to submit a special request for a denial-of-service attack...

7.5CVSS7.7AI score0.09985EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/02/08 12:00 a.m.3 views

NTP Denial of Service Vulnerability (CNVD-2016-00896)

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...

5.9CVSS7.7AI score0.07546EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/02/08 12:00 a.m.36 views

NTP Cronjob Script Local Privilege Vulnerability

The NTP Cronjob Script is a task script used to perform a purge operation on the statistics file generated by the NTP daemon running the statistics function. A security vulnerability exists in NTP Cronjob Script that can be exploited by attackers to gain root privileges and perform unauthorized...

7.8CVSS8.2AI score0.01254EPSS
SaveExploits4References1
CNVD
CNVD
added 2016/02/04 12:00 a.m.3 views

NTP Security Bypass Vulnerability

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker can exploit this vulnerability to obtain sensitive information by performing a man-in-the-middle attack or replay attack...

6.5CVSS5.9AI score0.03362EPSS
SaveExploits2References1
CNVD
CNVD
added 2016/02/04 12:00 a.m.3 views

NTP Security Bypass Vulnerability (CNVD-2016-00818)

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

5.8CVSS6.9AI score0.04643EPSS
SaveExploits0References1
Rows per page
Query Builder