Dramatic Drop in Vulnerable NTP Servers Used in DDoS Attacks

While patching of webservers vulnerable to the Heartbleed OpenSSL bug may have stalled, the same cannot be said about repairs to NTP servers that could be leveraged in devastating amplification attacks. A spate of distributed denial-of-service attacks DDoS tore through companies in January and...

Scientific Linux Security Update : tzdata enhancement update on SL5.x, SL6.x i386/x86_64 (20140623)

This update adds the following enhancements : - Based on the official government announcement, Egypt's 2014 Ramadan-based transitions were updated to June 26 and July 31 at 24:00. - Morocco's Ramadan transitions were also updated to June 28 at 03:00 and August 2 at 02:00. This update has been...

AIX 7.1 TL 2 : ntp (IV55365)

The monlist feature in ntpd in NTP allows remote attackers to cause a denial of service traffic amplification via forged 1 REQMONGETLIST or 2 REQMONGETLIST1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

AIX 6.1 TL 9 : ntp (IV56213)

The monlist feature in ntpd in NTP allows remote attackers to cause a denial of service traffic amplification via forged 1 REQMONGETLIST or 2 REQMONGETLIST1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

AIX 7.1 TL 3 : ntp (IV56324)

The monlist feature in ntpd in NTP allows remote attackers to cause a denial of service traffic amplification via forged 1 REQMONGETLIST or 2 REQMONGETLIST1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

AIX 5.3 TL 12 : ntp (IV59636)

The monlist feature in ntpd in NTP allows remote attackers to cause a denial of service traffic amplification via forged 1 REQMONGETLIST or 2 REQMONGETLIST1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

AIX 6.1 TL 7 : ntp (IV58413)

The monlist feature in ntpd in NTP allows remote attackers to cause a denial of service traffic amplification via forged 1 REQMONGETLIST or 2 REQMONGETLIST1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

AIX 7.1 TL 1 : ntp (IV56575)

The monlist feature in ntpd in NTP allows remote attackers to cause a denial of service traffic amplification via forged 1 REQMONGETLIST or 2 REQMONGETLIST1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

AIX 6.1 TL 8 : ntp (IV58068)

The monlist feature in ntpd in NTP allows remote attackers to cause a denial of service traffic amplification via forged 1 REQMONGETLIST or 2 REQMONGETLIST1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

openSUSE Security Update : systemd (openSUSE-2012-139)

Add fix-console-switch.patch: prevent console lockup rhb771563. - Add fix-quota.patch: correctly enable quota rhb773431. - Add passcredentials.patch: ensure compatibility with kernel 3.2 bnc743299. - Update modulesonboot.patch to not cause failed state for systemd-modules-load.service bnc741481...

PointDNS Recovers from Massive DDoS Attack

PointDNS says most of its DNS servers are online again after a massive DDoS attack late last week took down the service provider. A post on the company’s Twitter account on Friday said the provider was adding nameservers and working with network providers to restore service to its customers. Many...

Volume of NTP Amplification Attacks Getting Louder

No security arena is better representative of the cat and mouse game between hackers and defenders than DDoS attacks and prevention/mitigation. Enterprises and service providers have invested heavily in DDoS mitigations in order to keep critical services available. That’s forced hackers to crank ...

NTP ntpd monlist Query Reflection - Denial of Service

Exploit for linux platform in category dos / poc / Exploit Title: CVE-2013-5211 PoC - NTP DDoS amplification Date: 28/04/2014 Code Author: Danilo PC - CVE : CVE-2013-5211 / / I coded this program to help other to understand how an DDoS attack amplified by NTP servers works CVE-2013-5211 I took of...

NTP ntpd monlist Query Reflection - Denial of Service

/ Exploit Title: CVE-2013-5211 PoC - NTP DDoS amplification Date: 28/04/2014 Code Author: Danilo PC - CVE : CVE-2013-5211 / / I coded this program to help other to understand how an DDoS attack amplified by NTP servers works CVE-2013-5211 I took of the code that generates a DDoS, so this code onl...

NTP ntpd monlist Query Reflection - Denial of Service

NTP ntpd monlist Query Reflection - Denial of Service / Exploit Title: CVE-2013-5211 PoC - NTP DDoS amplification Date: 28/04/2014 Code Author: Danilo PC - CVE : CVE-2013-5211 / / I coded this program to help other to understand how an DDoS attack amplified by NTP servers works CVE-2013-5211 I to...

DDoS Attacks a Cover for Financial Fraud, IP Theft

It’s difficult to imagine a noisier attack than a distributed denial-of-service attack. They’re an ever-present threat to banks and other businesses where the uptime of Web-based services is critical to customers and the well-being of an enterprise. And as a handful proved throughout 2013, they a...

SOL15154 - NTP vulnerability CVE-2013-5211

These BIG-IP, Enterprise Manager, and BIG-IQ versions use an affected version of NTP, but are not remotely vulnerable as the query operation is allowed only on localhost in our distribution. Recommended action If the previous table lists a version in the Versions known to be not vulnerable column...

Over 20Gbps DDoS attacks Now Become Common for Hackers

The Distributed Denial of Service DDoS attack has become more sophisticated and complex and therefore has become one of the favorite weapon for the cyber criminals to temporarily suspend the services of any host connected to the Internet and till now nearly every big site had been a victim of thi...

NTP Aplification, SYN Floods Drive Up DDoS Attack Volumes

There has been a steady but dramatic increase in the potency of distributed denial of service DDoS attacks from the beginning of 2013 through the first two months of this year. In large part, reason for this rise in volume has to do with the widespread adoption of two attack methods: large...

NTP Amplification DDoS Attacks Increasing

An ever-shrinking number of vulnerable network time protocol NTP servers are being used with customized distributed denial of service DDoS toolkits to perform increasingly potent NTP amplification attacks. According to the DDoS mitigation specialists at Prolexic, who issued a high alert DDoS atta...