Red Hat Security AdvisoryRHSA-2009:1040
ntp security update
Released 2009-05-18 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS EUS (v. 4.7) ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386, ntp-4.2.0.a.20040617-8.el4_7.2.ia64 +1
- Red Hat Enterprise Linux AS version 4 ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386, ntp-4.2.0.a.20040617-8.el4_7.2.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386
- Red Hat Enterprise Linux ES EUS (v. 4.7) ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386, ntp-4.2.0.a.20040617-8.el4_7.2.ia64
- Red Hat Enterprise Linux ES version 4 ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386, ntp-4.2.0.a.20040617-8.el4_7.2.ia64
- Red Hat Enterprise Linux WS version 4 ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386, ntp-4.2.0.a.20040617-8.el4_7.2.ia64
Fixes 2 records
Priority MEDIUM 49
Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.21286 · Published 2009-05-19 · Fixed CWE-119
Priority MEDIUM 45
Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.13228 · Published 2009-04-14 · Fixed CWE-119
