EUVD-2009-2859

Malware in sbrugna...

Security Bulletin: Vulnerabilities in NTPv4 affect AIX (CVE-2020-11868, CVE-2020-13817, and CVE-2020-15025)

Summary There are vulnerabilities in NTPv4 that affect AIX. Vulnerability Details CVEID: CVE-2020-15025 DESCRIPTION: NTP is vulnerable to a denial of service, caused by a memory leak when a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file in ntpd. By sending...

There are vulnerabilities in NTPv4 that affect AIX.

IBM SECURITY ADVISORY First Issued: Mon Oct 26 15:14:11 CDT 2020 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntpadvisory13.asc https://aix.software.ibm.com/aix/efixes/security/ntpadvisory13.asc...

Security Bulletin: Vulnerability in NTP affects AIX (CVE-2019-8936)

Summary There is a vulnerability in NTPv3 and NTPv4 that affects AIX. Vulnerability Details CVEID: CVE-2019-8936 DESCRIPTION: NTP is vulnerable to a denial of service, caused by a NULL pointer dereference in ntpcontrol.c. By sending specially crafted mode 6 packets, a remote authenticated attacke...

Arbitrary Code Execution

ntpd is vulnerable to arbitrary code execution. A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authentication code. If ntpd was configured to use public key cryptography for NTP packet authentication, a remote attacker could use this flaw to send a specially-crafted request pack...

There are vulnerabilities in NTPv4 that affect AIX.,Vulnerabilities in NTP affect AIX,Vulnerabilities in NTP affect VIOS

IBM SECURITY ADVISORY First Issued: Mon Aug 19 16:44:22 CDT 2019 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntpadvisory12.asc https://aix.software.ibm.com/aix/efixes/security/ntpadvisory12.asc...

Security Bulletin: Vulnerabilities in NTPv4 affect AIX (CVE-2018-12327, CVE-2018-7170)

Summary There is a vulnerability in NTPv4 that affects AIX. Vulnerability Details NTPv4 is vulnerable to: CVEID: CVE-2018-12327 DESCRIPTION: NTP is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by ntpq and ntpdc. By sending an overly long string argument, a local...

There are vulnerabilities in NTPv4 that affect AIX.

IBM SECURITY ADVISORY First Issued: Fri Dec 14 12:20:13 CST 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntpadvisory11.asc https://aix.software.ibm.com/aix/efixes/security/ntpadvisory11.asc...

Security Bulletin: Vulnerabilities in NTP affect AIX

Summary There are multiple vulnerabilities in NTPv3 and NTPv4 that affect AIX. Vulnerability Details NTPv3 is vulnerable to: CVEID: CVE-2014-5209 DESCRIPTION: NTP could allow a remote attacker to obtain sensitive information. By sending a GETRESTRICT control message, an attacker could exploit thi...

Vulnerabilities in NTP affect AIX,Vulnerabilities in NTP affect VIOS

IBM SECURITY ADVISORY First Issued: Tue Aug 14 14:48:57 CDT 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntpadvisory10.asc https://aix.software.ibm.com/aix/efixes/security/ntpadvisory10.asc...

There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX,There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.,There are multiple vulnerabilities in NTPv3 and NTPv4 that impact VIOS

IBM SECURITY ADVISORY First Issued: Thu Jul 6 14:53:51 CDT 2017 |Updated: Mon Nov 13 14:32:25 CST 2017 |Update 3: Clarified that AIX 7100-04-05, 7200-00-05, and 7200-01-03 are | impacted. An additional iFix is provided for AIX 7100-04-05. The | iFixes already provided for 7200-00 and 7200-01 cove...

AIX 7.1 TL 3 : ntp (IV92193) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2016-7427 NTP is vulnerable to a denial of service, caused by an error in broadcast mode replay prevention functionality. By sending specially crafted NTP packets, a local attacker could exploit this vulnerability to cause a denial o...

AIX 7.2 TL 1 : ntp (IV92067) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2016-7427 NTP is vulnerable to a denial of service, caused by an error in broadcast mode replay prevention functionality. By sending specially crafted NTP packets, a local attacker could exploit this vulnerability to cause a denial o...

AIX 6.1 TL 9 : ntp (IV91803) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2016-7427 NTP is vulnerable to a denial of service, caused by an error in broadcast mode replay prevention functionality. By sending specially crafted NTP packets, a local attacker could exploit this vulnerability to cause a denial o...

AIX 7.1 TL 4 : ntp (IV91951) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2016-7427 NTP is vulnerable to a denial of service, caused by an error in broadcast mode replay prevention functionality. By sending specially crafted NTP packets, a local attacker could exploit this vulnerability to cause a denial o...

There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.

IBM SECURITY ADVISORY First Issued: Mon Feb 13 15:32:47 CST 2017 |Updated: Mon Oct 2 10:47:12 CDT 2017 |Update 2: Removed bos.net.tcp.ntp from the impacted fileset list for | AIX 7200-01-02. Fileset bos.net.tcp.ntpd is still listed as impacted | for AIX 7200-01-02. The most recent version of this...

AIX 5.3 TL 12 : ntp (IV87614) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...

AIX 7.1 TL 4 : ntp (IV87420) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...

AIX 7.1 TL 3 : ntp (IV87615) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...

AIX 7.2 TL 0 : ntp (IV87939) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...