MiracleLinux 7 : ntp-4.2.6p5-25.1.0.1.el7.AXS7 (AXSA:2017-1296:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1296:01 advisory. The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which...

EUVD-2008-1406

Malware in sbrugna...

SUSE CVE-2016-9311

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted packet...

ntp: Null pointer dereference when trap service is enabled

A flaw was found in the way ntpd implemented the trap service. A remote attacker could send a specially crafted packet to cause a null pointer dereference that will crash ntpd, resulting in a denial of service...

Null pointer dereference

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted packet...

DEBIAN-CVE-2016-9311

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted packet...

CVE-2016-9311

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted packet...

CVE-2016-9311: NULL Pointer Dereference

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted packet...

UBUNTU-CVE-2016-9311

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted packet...

PT-2017-10049

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference when the trap service is enabled. This can be achieved by sending specially crafte...

PT-2017-10048

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 Description The issue allows remote attackers to set or unset traps via a crafted control mode packet, which can lead to a denial of service caused by a NULL pointer dereference when the trap service has been...

CVE-2016-9311

A flaw was found in the way ntpd implemented the trap service. A remote attacker could send a specially crafted packet to cause a null pointer dereference that will crash ntpd, resulting in a denial of service. Mitigation Use "restrict default noquery ..." in your ntp.conf file. Only allow mode 6...

PT-2016-7323

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 Description The issue allows remote attackers to cause a denial of service reject broadcast mode packets via a crafted broadcast mode packet. It is also caused by a NULL pointer dereference when trap service has...

PT-2016-7326

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 Description The issue allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. This is due to a regression of a previous issue. Multiple vulnerabilities could...

PT-2016-7324

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 Description The issue allows remote attackers to cause a denial of service, potentially by exploiting the poll interval in a broadcast packet or through a NULL pointer dereference when the trap service is enabled...

Design/Logic Flaw

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1402

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1402: Undefined Security Weakness

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

MG-SOFT Net Inspector 6.5.0.828 Multiple Remote Vulnerabilities

No description provided by source. Luigi Auriemma Application: MG-SOFT Net Inspector http://www.mg-soft.com/netinsp.html bug C affects any MgWTrap3 service which is included in...

mgsoft-multi.txt

Luigi Auriemma Application: MG-SOFT Net Inspector http://www.mg-soft.com/netinsp.html bug C affects any MgWTrap3 service which is included in almost all the MG-SOFT products like MIB Browser, Query Manager, Trap Ringer Pro and so on Versions: Net Inspector From vendor's website: "MG-SOFT Net...