CVE-2017-9864

Summary of CVE-2017-9864 (SMA Solar Technology inverter/time setting issue) : An attacker can change the plant time on SMA Solar Technology inverters (notably Sunny Boy TLST-21/TL-21 and Sunny Tripower TL-10/TL-30) without authentication, causing the system time to shift. This can affect timestam...

Design/Logic Flaw

ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, any packet with a source ip...

[SECURITY] Fedora 25 Update: ntp-4.2.6p5-43.fc25

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

FireEye Responds to Wave of Destructive Cyber Attacks in Gulf Region

In 2012, a suspected Iranian hacker group called the “Cutting Sword of Justice” used malware known as Shamoon – or Disttrack. In mid-November, Mandiant, a FireEye company, responded to the first Shamoon 2.0 incident against an organization located in the Gulf states. Since then, Mandiant has...

How to Troubleshoot Virtual Delivery Agent (VDA) Registration Issues

Cloud Admins: Run the Cloud Health Check InstructionsandInstallationSelect Cloud Health Check from the dropdown OnPrem Admins: Run the Citrix Scout Health Introduction to Citrix Scout After running the CHC or Scout depending on your environment begin troubleshooting common root causes: 1. Check V...

CVE-2016-1384

The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898...

CVE-2016-1384

The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898...

Code injection

The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898...

CVE-2016-1384

The CVE-2016-1384 entry describes a Cisco NTP Subsystem vulnerability in Cisco IOS (15.1/15.5) and IOS XE (3.2–3.17) where missing authorization checks on certain NTP packets allow an unauthenticated, remote attacker to modify the device time. This could impact timekeeping and trust; exploit stat...

CVE-2016-1384

The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898...

CVE-2016-0783

The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset tokens, which makes it easier for remote attackers to reset arbitrary user passwords by leveraging knowledge of a user name and the current system time...

Task fails with error: Application is Shutting Down

Challenge Jobs of any type fail with the error, "Application is shutting down." For example: Application is shutting down. Failed to download disk. Shared memory connection was closed. Failed to upload disk. Agent failed to process method DataTransfer.SyncDisk Copy BackupSynthesizedStorageToTape...

Cisco Small Business 500 Wireless Access Point Time Setting Vulnerability

The Cisco Small Business 500 Wireless Access Point is a wireless access point product that provides high-capacity wireless LAN and guest access services, among other features. A security vulnerability in the Cisco Small Business 500 Wireless Access Point allows a remote attacker to set the system...

CVE-2016-1334

Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457...

CVE-2016-1334

Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457...

CVE-2016-1334

Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457...

CVE-2016-1334

CVE-2016-1334 affects Cisco Small Business 500 Series Wireless Access Point devices running firmware 1.0.4.4. Root cause: insufficient validation of parameters in HTTP POST handling, enabling remote attackers to set the system time via a crafted POST request. Impact stated as integrity disruption...

FreeBSD-SA-16:02.ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:02.ntp Security Advisory The FreeBSD Project Topic: ntp panic threshold bypass vulnerability Category: contrib Module: ntp Announced: 2016-01-14 Credits:...

Ubuntu 14.04 LTS : NTP vulnerabilities (USN-2783-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2783-1 advisory. Aleksis Kauppinen discovered that NTP incorrectly handled certain remote config packets. In a non-default configuration, a remote authenticated attacker...

NAK to the Future: NTP Symmetric Association Authentication Bypass Vulnerability

Talos Vulnerability Report TALOS-2015-0069 NAK to the Future: NTP Symmetric Association Authentication Bypass Vulnerability October 21, 2015 CVE Number CVE-2015-7871 Summary Unauthenticated off-path attackers can force ntpd processes to peer with malicious time sources of the attacker’s choosing...