Red Hat Security AdvisoryRHSA-2009:0046
ntp security update
Released 2009-01-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) ntp-4.2.2p1-9.el5_3.1, ntp-4.2.2p1-9.el5_3.1.i386, ntp-4.2.2p1-9.el5_3.1.ia64 +1
- Red Hat Enterprise Linux AS version 4 ntp-4.2.0.a.20040617-8.el4_7.1, ntp-4.2.0.a.20040617-8.el4_7.1.i386, ntp-4.2.0.a.20040617-8.el4_7.1.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) ntp-4.2.2p1-9.el5_3.1, ntp-4.2.2p1-9.el5_3.1.i386
- Red Hat Enterprise Linux Desktop version 4 ntp-4.2.0.a.20040617-8.el4_7.1, ntp-4.2.0.a.20040617-8.el4_7.1.i386
- Red Hat Enterprise Linux ES version 4 ntp-4.2.0.a.20040617-8.el4_7.1, ntp-4.2.0.a.20040617-8.el4_7.1.i386, ntp-4.2.0.a.20040617-8.el4_7.1.ia64
- Red Hat Enterprise Linux WS version 4 ntp-4.2.0.a.20040617-8.el4_7.1, ntp-4.2.0.a.20040617-8.el4_7.1.i386, ntp-4.2.0.a.20040617-8.el4_7.1.ia64
Fixes 1 record
Priority LOW 29
NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a ma…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03218 · Published 2009-01-07 · Fixed CWE-287
