CVE-2009-1252

Stack-based buffer overflow in the cryptorecv function in ntpcrypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field...

CVE-2009-1252

CVE-2009-1252 describes a stack-based buffer overflow in ntpd’s ntp_crypto.c (function crypto_recv) when autokey is enabled. A crafted NTP extension-field packet can remote-execute code. Affected: NTP daemon (ntpd) before 4.2.4p7 and 4.2.5 before 4.2.5p74 with OpenSSL/autokey enabled. Impact per ...

CVE-2009-1252

Stack-based buffer overflow in the cryptorecv function in ntpcrypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field...

ntp security update

CentOS Errata and Security Advisory CESA-2009:1039 An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to...

[SECURITY] [DSA 1801-1] New ntp packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1801-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 19, 2009 http://www.debian.org/security/faq -...

RHEL 5 : ntp (RHSA-2009:1039)

An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced tim...

RHEL 4 : ntp (RHSA-2009:1040)

An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time...

ntp: buffer overflow in ntpq

Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response...

Important: Red Hat Security Advisory: ntp security update

An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced tim...

ntpd autokey stack buffer overflow

Overview ntpd contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system or create a denial of service. Description NTP Network Time Protocol is a method by which client machines can synchronize the local date and time wit...

ntp security update

4.2.2p1-9.el53.2 - fix buffer overflow when parsing Autokey association message 500783, CVE-2009-1252 - fix buffer overflow in ntpq 500783, CVE-2009-0159...

NTP Stack Buffer Overflow Vulnerability

This host has NTP installed and is prone to stack buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodntpbofvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ NTP Stack Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod, http://www.secpod.com This...

NTP.org 'ntpd' Stack Buffer Overflow Vulnerability

NTP.org SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntp:ntp"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900623";...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : ntp vulnerability (USN-705-1)

It was discovered that NTP did not properly perform signature verification. A remote attacker could exploit this to bypass certificate validation via a malformed SSL/TLS signature. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Fedora 10 : ntp-4.2.4p6-1.fc10 (2009-0544)

This update fixes CVE-2009-0021: NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA...

Mandriva Linux Security Advisory : ntp (MDVSA-2009:007)

A flaw was found in how NTP checked the return value of signature verification. A remote attacker could use this to bypass certificate validation by using a malformed SSL/TLS signature CVE-2009-0021. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Netwo...

Mandriva Linux Security Advisory : ntp (MDVSA-2009:092)

A vulnerability has been found and corrected in ntp : Requesting peer information from a malicious remote time server may lead to an unexpected application termination or arbitrary code execution CVE-2009-0159. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C...

Mandrake Security Advisory MDVSA-2009:092 (ntp)

The remote host is missing an update to ntp announced via advisory MDVSA-2009:092. OpenVAS Vulnerability Test $Id: mdksa2009092.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:092 ntp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:092 (ntp)

The remote host is missing an update to ntp announced via advisory MDVSA-2009:092. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Stack overflow

Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response...