Cisco NTP ntpd readvar Variable Remote Overflow (CSCdt93866)

By sending a crafted NTP control packet, it is possible to trigger a buffer overflow in the NTP daemon. This vulnerability can be exploited remotely. The successful exploitation may cause arbitrary code to be executed on the target machine. This vulnerability is documented as Cisco Bug ID...

Cisco Security Advisory: NTP vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: NTP Vulnerability ========================================== Revision 1.0 For Public Release 2002 May 08 16:00 UTC+0000 - ---------------------------------------------------------------------------- Summary ======= Network Time Protocol...

Buffer overflow in CIsco NTP

No description provided...

NTP Vulnerability

...

Network Time Protocol Daemon (ntpd) readvar Variable Overflow RCE

The remote NTP server is affected by a buffer overflow condition due to improper bounds checking on the 'readvar' argument. An unauthenticated, remote attacker can exploit this, via a specially crafted request that uses an overly long argument, to execute arbitrary code with root privileges. C...

[DSA-045-2] New version of ntp released

---------------------------------------------------------------------------- Debian Security Advisory DSA-045-2 [email protected] http://www.debian.org/security/ Michael Stone April 9, 2001 - ---------------------------------------------------------------------------- Package: ntp...

[SECURITY] [DSA 045-1] ntp remote root exploit fixed

---------------------------------------------------------------------------- Debian Security Advisory DSA-045-1 [email protected] http://www.debian.org/security/ Michael Stone April 5, 2001 - ---------------------------------------------------------------------------- Package: ntp...

Network Time Protocol ([x]ntpd) daemon contains buffer overflow in ntp_control:ctl_getitem() function

Overview There is a buffer overflow defect in the ctlgetitem function of the Network Time Protocol NTP daemon responsible for providing accurate time reports used for synchronizing the clocks on installed systems. All NTP daemons based on code maintained at the University of Delaware since NTPv2...

NTPd - Remote Buffer Overflow

NTPd - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/2540/info NTP, the Network Time Protocol, is used to synchronize the time between a computer and another system or time reference. It uses UDP as a transport protocol. There are two protocol versions in use: NTP v3 and NTP...

NTPd - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/2540/info NTP, the Network Time Protocol, is used to synchronize the time between a computer and another system or time reference. It uses UDP as a transport protocol. There are two protocol versions in use: NTP v3 and NTP v4. The 'ntpd' daemon...

NTPd 4.0.99j-k readvar - Remote Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'NTP daemon...

NTPd 4.0.99j-k readvar - Remote Buffer Overflow (Metasploit)

NTPd 4.0.99j-k readvar - Remote Buffer Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

NTP Daemon readvar Buffer Overflow

This module exploits a stack based buffer overflow in the ntpd and xntpd service. By sending an overly long 'readvar' request it is possible to execute code remotely. As the stack is corrupted, this module uses the Egghunter technique. Module Options msf use exploit/multi/ntp/ntp/overflow msf...