NTP ntpd Mode 7 Error Response Packet Loop Remote DoS

The version of ntpd running on the remote host has a denial of service vulnerability. It responds to mode 7 error packets with its own mode 7 error packets. A remote attacker could exploit this by sending a mode 7 error response with a spoofed IP header, setting the source and destination IP...

Fedora 12 : ntp-4.2.4p8-1.fc12 (2009-13046)

This update fixes possible DoS with mode 7 packets. CVE-2009-3563 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 10 : ntp-4.2.4p7-2.fc10 (2009-13121)

This update fixes possible DoS with mode 7 packets. CVE-2009-3563 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

ntp-info NSE Script

Gets the time and configuration variables from an NTP server. We send two requests: a time request and a "read variables" opcode 2 control message. Without verbosity, the script shows the time and the value of the version, processor, system, refid, and stratum variables. With verbosity, all...

NTP MODE_PRIVATE报文远程拒绝服务漏洞

BUGTRAQ ID: 37255 CVE ID: CVE-2009-3563 NTP（Network Time Protocol）是用于通过网络同步计算机时钟的协议。 ntpdc查询和控制工具使用NTP模式7（MODEPRIVATE），ntpq使用NTP模式6（MODECONTROL），而例程NTP时间传输使用模式1到5。在从非restrict ... noquery或restrict ... ignore网段所列出的地址接收到错误的模式7请求或模式7错误响应时，ntpd会回复模式7出错响应并记录一条消息日志。如果攻击者能够在发送给主机...

[SECURITY] Fedora 11 Update: ntp-4.2.4p7-3.fc11

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

[SECURITY] Fedora 12 Update: ntp-4.2.4p8-1.fc12

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 8.1 / 9.0 / 9.1 / current : ntp (SSA:2009-343-01)

New ntp packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. If a spoofed mode 7 packet is sent to a vulnerable NTP daemon it may cause CPU and/or disk space exhaustion, resulting in a denial of service...

[slackware-security] ntp

New ntp packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. If a spoofed mode 7 packet is sent to a vulnerable NTP daemon it may cause CPU and/or disk space exhaustion, resulting in a denial of service. More...

Mandriva Security Advisory MDVSA-2009:309 (ntp)

The remote host is missing an update to ntp announced via advisory MDVSA-2009:309. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Mandriva Security Advisory MDVSA-2009:309 (ntp)

The remote host is missing an update to ntp announced via advisory MDVSA-2009:309. OpenVAS Vulnerability Test $Id: mdksa2009309.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:309 ntp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-3563

ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error responses between two NTP daemon...

CVE-2009-3563

ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error responses between two NTP daemon...

CVE-2009-3563

ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error responses between two NTP daemon...

ntp server DoS

NTP packet from the spoofed address of server itself causes resources exhaustion...

CVE-2009-3563

CVE-2009-3563 affects ntpd’s NTP implementation through ntp_request.c, allowing a remote attacker to cause a denial of service by sending spoofed MODE_PRIVATE packets that trigger a continuous exchange of MODE_PRIVATE error responses between two NTP daemons. Affected versions include ntpd before ...

[USN-867-1] Ntp vulnerability

=========================================================== Ubuntu Security Notice USN-867-1 December 08, 2009 ntp vulnerability CVE-2009-3563 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu...

RHEL 4 / 5 : ntp (RHSA-2009:1648)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1648 advisory. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time source. Robin Park and Dmitri Vinokurov discovered ...

RHEL 3 : ntp (RHSA-2009:1651)

An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time...

CentOS 4 / 5 : ntp (CESA-2009:1648)

An updated ntp package that fixes a security issue is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced...