NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

NTP is prone to a remote denial-of-service vulnerability because it fails to properly handle certain incoming network packets. An attacker can exploit this issue to cause the application to consume excessive CPU resources and fill disk space with log messages. OpenVAS Vulnerability Test $Id:...

RedHat Security Advisory RHSA-2009:1648

The remote host is missing updates announced in advisory RHSA-2009:1648. The Network Time Protocol NTP is used to synchronize a computer SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

ntp-info NSE Script

Gets the time and configuration variables from an NTP server. We send two requests: a time request and a "read variables" opcode 2 control message. Without verbosity, the script shows the time and the value of the version, processor, system, refid, and stratum variables. With verbosity, all...

NTP MODE_PRIVATE报文远程拒绝服务漏洞

BUGTRAQ ID: 37255 CVE ID: CVE-2009-3563 NTP（Network Time Protocol）是用于通过网络同步计算机时钟的协议。 ntpdc查询和控制工具使用NTP模式7（MODEPRIVATE），ntpq使用NTP模式6（MODECONTROL），而例程NTP时间传输使用模式1到5。在从非restrict ... noquery或restrict ... ignore网段所列出的地址接收到错误的模式7请求或模式7错误响应时，ntpd会回复模式7出错响应并记录一条消息日志。如果攻击者能够在发送给主机...

[SECURITY] Fedora 10 Update: ntp-4.2.4p7-2.fc10

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

[SECURITY] Fedora 11 Update: ntp-4.2.4p7-3.fc11

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

[SECURITY] Fedora 12 Update: ntp-4.2.4p8-1.fc12

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

RHEL 3 : ntp (RHSA-2009:1651)

An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time...

Network Time Protocol Package Remote Message Loop Denial of Service Vulnerability

The Network Time Protocol NTP package contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to an error in handling certain malformed messages. An unauthenticated, remote attacker could send a malicious N...

ntp security update

CentOS Errata and Security Advisory CESA-2009:1648 An updated ntp package that fixes a security issue is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used t...

ntp security update

CentOS Errata and Security Advisory CESA-2009:1651 An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to...

ntp: buffer overflow in ntpq

Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response...

ntpd: DoS with mode 7 packets (VU#568372)

ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error responses between two NTP daemon...

Moderate: Red Hat Security Advisory: ntp security update

An updated ntp package that fixes a security issue is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced...

ntpd: DoS with mode 7 packets (VU#568372)

ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error responses between two NTP daemon...

[SECURITY] Fedora 11 Update: ntp-4.2.4p7-2.fc11

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

FreeBSD Security Advisory (FreeBSD-SA-09:11.ntpd.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:11.ntpd.asc ADV FreeBSD-SA-09:11.ntpd.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:11.ntpd.asc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

FreeBSD-SA-09:11.ntpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:11.ntpd Security Advisory The FreeBSD Project Topic: ntpd stack-based buffer-overflow vulnerability Category: contrib Module: ntpd Announced: 2009-06-10...

[SECURITY] Fedora 9 Update: ntp-4.2.4p7-1.fc9

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

[SECURITY] Fedora 10 Update: ntp-4.2.4p7-1.fc10

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...