VMSA-2010-0009 : ESXi ntp and ESX Service Console third-party updates

a. Service Console update for COS kernel Updated COS package 'kernel' addresses the security issues that are fixed through versions 2.6.18-164.11.1. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2009-2695, CVE-2009-2908, CVE-2009-3228, CVE-2009-3286,...

AIX 5.3 TL 11 : bos.net.tcp.client (U832837)

The remote host is missing AIX PTF U832837, which is related to the security of the package bos.net.tcp.client. NTP mode 7 MODEPRIVATE is used by the ntpdc query and control utility. In contrast, ntpq uses NTP mode 6 MODECONTROL, while routine NTP time transfers use modes 1 through 5. Upon receip...

AIX 5.3 TL 9 : bos.net.tcp.client (U830255)

The remote host is missing AIX PTF U830255, which is related to the security of the package bos.net.tcp.client. NTP mode 7 MODEPRIVATE is used by the ntpdc query and control utility. In contrast, ntpq uses NTP mode 6 MODECONTROL, while routine NTP time transfers use modes 1 through 5. Upon receip...

AIX 5.3 TL 8 : bos.net.tcp.client (U832257)

The remote host is missing AIX PTF U832257, which is related to the security of the package bos.net.tcp.client. NTP mode 7 MODEPRIVATE is used by the ntpdc query and control utility. In contrast, ntpq uses NTP mode 6 MODECONTROL, while routine NTP time transfers use modes 1 through 5. Upon receip...

AIX 5.3 TL 10 : bos.net.tcp.client (U832875)

The remote host is missing AIX PTF U832875, which is related to the security of the package bos.net.tcp.client. NTP mode 7 MODEPRIVATE is used by the ntpdc query and control utility. In contrast, ntpq uses NTP mode 6 MODECONTROL, while routine NTP time transfers use modes 1 through 5. Upon receip...

Solaris 10 (x86) : 143726-11 (deprecated)

SunOS 5.10x86: SunFreeware ntp patch. Date this patch was last updated by Sun : Oct/16/17 This plugin has been deprecated and either replaced with individual 143726 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled o...

Solaris 10 (x86) : 143728-06 (deprecated)

SunOS 5.10x86: SunFreeware ntp source patch. Date this patch was last updated by Sun : Mar/03/16 This plugin has been deprecated and either replaced with individual 143728 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

GLSA-201001-01 : NTP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201001-01 NTP: Denial of Service Robin Park and Dmitri Vinokurov discovered that ntprequest.c in ntpd does not handle MODEPRIVATE packets correctly, causing a continuous exchange of MODEPRIVATE error responses between two NTP...

Debian DSA-1992-1 : chrony - several vulnerabilities

Several vulnerabilities have been discovered in chrony, a pair of programs which are used to maintain the accuracy of the system clock on a computer. This issues are similar to the NTP security flaw CVE-2009-3563. The Common Vulnerabilities and Exposures project identifies the following problems ...

Debian DSA-1948-1 : ntp - denial of service

Robin Park and Dmitri Vinokurov discovered that the daemon component of the ntp package, a reference implementation of the NTP protocol, is not properly reacting to certain incoming packets. An unexpected NTP mode 7 packet MODEPRIVATE with spoofed IP data can lead ntpd to reply with a mode 7...

Debian Security Advisory DSA 1992-1 (chrony)

The remote host is missing an update to chrony announced via advisory DSA 1992-1. OpenVAS Vulnerability Test $Id: deb19921.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1992-1 chrony Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

CVE-2010-0293

The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service memory consumption via spoofed 1 NTP or 2 cmdmon packets...

Information disclosure

The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service memory consumption via spoofed 1 NTP or 2 cmdmon packets...

CVE-2010-0293

The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service memory consumption via spoofed 1 NTP or 2 cmdmon packets...

CVE-2010-0293

CVE-2010-0293 affects chronyd in Chrony prior to 1.23.1, where the client logging facility does not cap memory used for storing client information. This can allow remote attackers to exhaust memory via spoofed NTP or cmdmon packets, causing denial of service. Affected software: chronyd/Chrony bef...

CVE-2010-0293

The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service memory consumption via spoofed 1 NTP or 2 cmdmon packets...

DSA-1992-1 chrony - denial of service

Bulletin has no description...

Multiple Vendors NTP Mode 7 Denial of Service (CVE-2009-3563)

The ntpd daemon implements the Network Time Protocol NTP which sets and maintains the system time-of-day in synchronism with Internet standard time servers or other local reference clocks. NTP.org maintains the reference implementation of ntpd that is used by multiple vendors. A denial of service...

NTP Monitor List Scanner

This module identifies NTP servers which permit "monlist" queries and obtains the recent clients list. The monlist feature allows remote attackers to cause a denial of service traffic amplification via spoofed requests. The more clients there are in the list, the greater the amplification. This...

IT-Grundschutz M4.227: Einsatz eines lokalen NTP-Servers zur Zeitsynchronisation (Windows)

IT-Grundschutz M4.227: Einsatz eines lokalen NTP-Servers zur Zeitsynchronisation Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94219 Diese Prüfung bezieht si...