CVE-2001-0414 Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.
HighCVSS 10.0
EPSS 91.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dave mills ntpd | <= 4.0.99k | No fix listed |
| dave mills ntpd | = 4.0.99 | No fix listed |
| dave mills ntpd | = 4.0.99a | No fix listed |
| dave mills ntpd | = 4.0.99b | No fix listed |
| dave mills ntpd | = 4.0.99c | No fix listed |
| dave mills ntpd | = 4.0.99d | No fix listed |
| dave mills ntpd | = 4.0.99e | No fix listed |
| dave mills ntpd | = 4.0.99f | No fix listed |
| dave mills ntpd | = 4.0.99g | No fix listed |
| dave mills ntpd | = 4.0.99h | No fix listed |
| dave mills ntpd | = 4.0.99i | No fix listed |
| dave mills ntpd | = 4.0.99j | No fix listed |
| dave mills xntp3 | = 5.93 | No fix listed |
| dave mills xntp3 | = 5.93a | No fix listed |
| dave mills xntp3 | = 5.93b | No fix listed |
| dave mills xntp3 | = 5.93c | No fix listed |
| dave mills xntp3 | = 5.93d | No fix listed |
| dave mills xntp3 | = 5.93e | No fix listed |
References
- 20010409 [ESA-20010409-01] xntp buffer overflow mailing-list
- 20010413 PROGENY-SA-2001-02A: [UPDATE] ntpd remote buffer overflow mailing-list
- 20010418 IBM MSS Outside Advisory Redistribution: IBM AIX: Buffer Overflow Vulnerability in (x)ntp mailing-list
- CLA-2001:392 vendor-advisory
- SuSE-SA:2001:10 vendor-advisory
- 20010404 ntpd =< 4.0.99k remote buffer overflow mailing-list
- 20010405 Re: ntpd =< 4.0.99k remote buffer overflow] mailing-list
- 20010406 Immunix OS Security update for ntp and xntp3 mailing-list
- 20010408 [slackware-security] buffer overflow fix for NTP mailing-list
- 20010409 ntp-4.99k23.tar.gz is available mailing-list
- 20010409 PROGENY-SA-2001-02: ntpd remote buffer overflow mailing-list
- 20010409 ntpd - new Debian 2.2 (potato) version is also vulnerable mailing-list
- CSSA-2001-013 vendor-advisory
- MDKSA-2001:036 patch vendor-advisory
- 805 vdb-entry
- RHSA-2001:045 vendor-advisory
- 2540 exploit patch vdb-entry vendor-advisory
- ntpd-remote-bo(6321) vdb-entry
- oval:org.mitre.oval:def:3831 signature vdb-entry
- DSA-045 vendor-advisory