ntp

New ntp packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-0159...

Fedora 9 : ntp-4.2.4p7-1.fc9 (2009-5275)

This update fixes a denial of service issue if autokey is enabled default is disabled and a crash in ntpq. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...

Fedora 10 : ntp-4.2.4p7-1.fc10 (2009-5273)

This update fixes a denial of service issue if autokey is enabled default is disabled and a crash in ntpq. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...

[SECURITY] Fedora 9 Update: ntp-4.2.4p7-1.fc9

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

[SECURITY] Fedora 10 Update: ntp-4.2.4p7-1.fc10

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

GLSA-200905-08 : NTP: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200905-08 NTP: Remote execution of arbitrary code Multiple vulnerabilities have been found in the programs included in the NTP package: Apple Product Security reported a boundary error in the cookedprint function in ntpq/ntpq.c,...

[ GLSA 200905-08 ] NTP: Remote execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200905-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

FreeBSD : ntp -- stack-based buffer overflow (4175c811-f690-4898-87c5-755b3cf1bac6)

US-CERT reports : ntpd contains a stack-based buffer overflow which may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system or create a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

NTP Daemon Autokey Stack Buffer Overflow (CVE-2009-1252)

The ntpd daemon implements the Network Time Protocol NTP which sets and maintains the system time-of-day in synchronism with Internet standard time servers.A buffer overflow vulnerability has been reported in the ntpd NTP daemon. The vulnerability is due to a boundary error in the ntpd when...

CentOS Security Advisory CESA-2009:1039 (ntp)

The remote host is missing updates to ntp announced in advisory CESA-2009:1039. CESA-2009:1039 64050 2 $Id: ovcesa20091039.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1039 ntp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian Security Advisory DSA 1801-1 (ntp)

The remote host is missing an update to ntp announced via advisory DSA 1801-1. OpenVAS Vulnerability Test $Id: deb18011.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1801-1 ntp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: ntp

The remote host is missing an update to the system as announced in the referenced advisory. VID 4175c811-f690-4898-87c5-755b3cf1bac6 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4175c811-f690-4898-87c5-755b3cf1bac6 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1801-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: ntp

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CentOS Security Advisory CESA-2009:1039 (ntp)

The remote host is missing updates to ntp announced in advisory CESA-2009:1039. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

ntp security update

4.2.0.a.20040617-8.el47.2 - fix buffer overflow when parsing Autokey association message 500781, CVE-2009-1252 - fix buffer overflow in ntpq 500781, CVE-2009-0159...

NTP.org 'ntpd' Autokey Stack Overflow Vulnerability

NTP.org SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntp:ntp"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900652";...

NTP 'ntpd' Autokey栈缓冲区溢出漏洞

Bugraq ID: 35017 CVE ID：CVE-2009-1252 CNCVE ID：CNCVE-20091252 NTP Network Time Protocol是一款客户端用于与时间服务器同步日期和时间的协议。 NTPd在以OpenSSL支持的情况下编译时存在栈缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 ntpd/ntpcrypto.c中cryptorecv函数使用sprintf存在缓冲区溢出，此漏洞需要配置使用autokey才会触发ntpd配置使用公钥加密进行NTP报文验证。远程未授权攻击者可以以ntpd守护程序权限执行任意代码。 Ubuntu...

RedHat Security Advisory RHSA-2009:1039

The remote host is missing updates announced in advisory RHSA-2009:1039. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time source. A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authentication code. If ntpd was configured to use public...

RedHat Security Advisory RHSA-2009:1040

The remote host is missing updates announced in advisory RHSA-2009:1040. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time source. A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authentication code. If ntpd was configured to use public...