1177 matches found
ntpd Information Disclosure Vulnerability
ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd version 4.x before 4.2.8p7 and version 4.3 before 4.3.92. An attacker could exploit the...
PT-2016-4856 · Ntf +7 · Ntp +7
Name of the Vulnerable Software and Affected Versions: NTP versions 4.2.8p4 and earlier NTPSec version aa48d001683e5b791a743ec9c575aaf7d867a2b0c Description: An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-dst timestamp recorded for that...
PT-2016-4855 · Ntp +8 · Ntp +8
Name of the Vulnerable Software and Affected Versions: NTP versions 4.2.8p4 and earlier NTPSec version a5fb34b9cc89b92a8fef2f459004865c93bb7f92 Description: An off-path attacker can cause a preemptible client association to be demobilized by sending a crypto NAK packet to a victim client with a...
PT-2016-4857 · Ntp +8 · Ntp +10
Name of the Vulnerable Software and Affected Versions: ntp versions 4.2.8p4 NTPSec version a5fb34b9cc89b92a8fef2f459004865c93bb7f92 Description: An issue exists in the message authentication functionality of libntp, allowing an attacker to send crafted messages in an attempt to recover the messag...
ntpd Denial of Service Vulnerability (CNVD-2016-02669)
ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd version 4.x before 4.2.8p7 and version 4.3 before 4.3.92. An attacker can exploit this...
ntpd Packet Injection Vulnerability
ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd version 4.x before 4.2.8p7 and version 4.3 before 4.3.92. An attacker can exploit this...
ntpd Denial of Service Vulnerability (CNVD-2016-02667)
ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd version 4.x prior to 4.2.8p7 and version 4.3 prior to 4.3.92. An attacker can exploit this...
ntpd denial of service vulnerability
ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd versions 4.x prior to 4.2.8p7 and 4.3 prior to 4.3.92, which stems from the program failing t...
PT-2016-3321 · Ntp +5 · Ntpd +7
Name of the Vulnerable Software and Affected Versions: ntpd versions prior to 4.2.8p4 NTPsec versions prior to a5fb34b9cc89b92a8fef2f459004865c93bb7f92 Description: A malicious authenticated peer can exploit an issue in the clock selection algorithm to modify a victim's clock. The issue is relate...
Network Time Protocol libntp Message Digest Disclosure Vulnerability
SUMMARY An exploitable vulnerability exists in the message authentication functionality of Network Time Protocol libntp. An attacker can send a series of crafted messages to attempt to recover the message digest key. TESTED VERSIONS ntp 4.2.8p4 NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92...
NTP ntpq Component Elevation of Privilege Vulnerability
NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. An elevation of privilege vulnerability exists in the ntpq component of NTP version 4.2.8p5, which can be exploited by a remote attacker to affect integrity by manipulating the...
CVE-2016-1384
The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898...
AIX NTP Advisory : ntp_advisory5 (IV81129) (IV81130)
A version of the Network Time Protocol NTP package installed on the remote AIX host is affected by an integrity vulnerability due to an improperly implemented threshold limitation for the '-g' option. A man-in-the-middle attacker can exploit this to intercept the NTP traffic and return arbitrary...
Vulnerability in NTPv4 affects AIX
IBM SECURITY ADVISORY First Issued: Mon Feb 22 08:06:13 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntpadvisory5.asc https://aix.software.ibm.com/aix/efixes/security/ntpadvisory5.asc...
NTP Denial of Service Vulnerability (CNVD-2016-00895)
NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...
NTP Denial of Service Vulnerability (CNVD-2016-00897)
NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that allows a remote attacker to submit a special request for a denial-of-service attack...
NTP Denial of Service Vulnerability (CNVD-2016-00896)
NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in NTP that could be exploited by a remote attacker to submit a special request for a denial-of-service attack...
NTP Cronjob Script Local Privilege Vulnerability
The NTP Cronjob Script is a task script used to perform a purge operation on the statistics file generated by the NTP daemon running the statistics function. A security vulnerability exists in NTP Cronjob Script that can be exploited by attackers to gain root privileges and perform unauthorized...
NTP Security Bypass Vulnerability
NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker can exploit this vulnerability to obtain sensitive information by performing a man-in-the-middle attack or replay attack...
NTP Security Bypass Vulnerability (CNVD-2016-00818)
NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...