CVE-2015-7976 The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a cr...
MediumCVSS 4.3
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.8p7+dfsg-1 | 1:4.2.8p7+dfsg-1 |
| ntp | = 4.1.2 | No fix listed |
| ntp | <= 4.2.8 | No fix listed |
| ntp | = 4.3.0 | No fix listed |
| ntp | = 4.3.1 | No fix listed |
| ntp | = 4.3.2 | No fix listed |
| ntp | = 4.3.3 | No fix listed |
| ntp | = 4.3.4 | No fix listed |
| ntp | = 4.3.5 | No fix listed |
| ntp | = 4.3.6 | No fix listed |
| ntp | = 4.3.7 | No fix listed |
| ntp | = 4.3.8 | No fix listed |
| ntp | = 4.3.9 | No fix listed |
| ntp | = 4.3.10 | No fix listed |
| ntp | = 4.3.11 | No fix listed |
| ntp | = 4.3.12 | No fix listed |
| ntp | = 4.3.13 | No fix listed |
| ntp | = 4.3.14 | No fix listed |
| ntp | = 4.3.15 | No fix listed |
| ntp | = 4.3.16 | No fix listed |
| ntp | = 4.3.17 | No fix listed |
| ntp | = 4.3.18 | No fix listed |
| ntp | = 4.3.19 | No fix listed |
| ntp | = 4.3.20 | No fix listed |
| ntp | = 4.3.21 | No fix listed |
Show 84 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ntp | = 4.3.22 | No fix listed |
| ntp | = 4.3.23 | No fix listed |
| ntp | = 4.3.24 | No fix listed |
| ntp | = 4.3.25 | No fix listed |
| ntp | = 4.3.26 | No fix listed |
| ntp | = 4.3.27 | No fix listed |
| ntp | = 4.3.28 | No fix listed |
| ntp | = 4.3.29 | No fix listed |
| ntp | = 4.3.30 | No fix listed |
| ntp | = 4.3.31 | No fix listed |
| ntp | = 4.3.32 | No fix listed |
| ntp | = 4.3.33 | No fix listed |
| ntp | = 4.3.34 | No fix listed |
| ntp | = 4.3.35 | No fix listed |
| ntp | = 4.3.36 | No fix listed |
| ntp | = 4.3.37 | No fix listed |
| ntp | = 4.3.38 | No fix listed |
| ntp | = 4.3.39 | No fix listed |
| ntp | = 4.3.40 | No fix listed |
| ntp | = 4.3.41 | No fix listed |
| ntp | = 4.3.42 | No fix listed |
| ntp | = 4.3.43 | No fix listed |
| ntp | = 4.3.44 | No fix listed |
| ntp | = 4.3.45 | No fix listed |
| ntp | = 4.3.46 | No fix listed |
| ntp | = 4.3.47 | No fix listed |
| ntp | = 4.3.48 | No fix listed |
| ntp | = 4.3.49 | No fix listed |
| ntp | = 4.3.50 | No fix listed |
| ntp | = 4.3.51 | No fix listed |
| ntp | = 4.3.52 | No fix listed |
| ntp | = 4.3.53 | No fix listed |
| ntp | = 4.3.54 | No fix listed |
| ntp | = 4.3.55 | No fix listed |
| ntp | = 4.3.56 | No fix listed |
| ntp | = 4.3.57 | No fix listed |
| ntp | = 4.3.58 | No fix listed |
| ntp | = 4.3.59 | No fix listed |
| ntp | = 4.3.60 | No fix listed |
| ntp | = 4.3.61 | No fix listed |
| ntp | = 4.3.62 | No fix listed |
| ntp | = 4.3.63 | No fix listed |
| ntp | = 4.3.64 | No fix listed |
| ntp | = 4.3.65 | No fix listed |
| ntp | = 4.3.66 | No fix listed |
| ntp | = 4.3.67 | No fix listed |
| ntp | = 4.3.68 | No fix listed |
| ntp | = 4.3.69 | No fix listed |
| ntp | = 4.3.70 | No fix listed |
| ntp | = 4.3.71 | No fix listed |
| ntp | = 4.3.72 | No fix listed |
| ntp | = 4.3.73 | No fix listed |
| ntp | = 4.3.74 | No fix listed |
| ntp | = 4.3.75 | No fix listed |
| ntp | = 4.3.76 | No fix listed |
| ntp | = 4.3.77 | No fix listed |
| ntp | = 4.3.78 | No fix listed |
| ntp | = 4.3.79 | No fix listed |
| ntp | = 4.3.80 | No fix listed |
| ntp | = 4.3.81 | No fix listed |
| ntp | = 4.3.82 | No fix listed |
| ntp | = 4.3.83 | No fix listed |
| ntp | = 4.3.84 | No fix listed |
| ntp | = 4.3.85 | No fix listed |
| ntp | = 4.3.86 | No fix listed |
| ntp | = 4.3.87 | No fix listed |
| ntp | = 4.3.88 | No fix listed |
| ntp | = 4.3.89 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp2 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp3 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp4 | No fix listed |
| SUSE manager | = 2.1 | No fix listed |
| SUSE manager proxy | = 2.1 | No fix listed |
| novell suse openstack cloud | = 5 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp2 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11-sp4 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| suse linux enterprise server | = 12 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- SUSE-SU-2016:1175 third-party-advisory vendor-advisory
- SUSE-SU-2016:1177 third-party-advisory vendor-advisory
- SUSE-SU-2016:1247 third-party-advisory vendor-advisory
- openSUSE-SU-2016:1292 third-party-advisory vendor-advisory
- SUSE-SU-2016:1311 third-party-advisory vendor-advisory
- SUSE-SU-2016:1912 third-party-advisory vendor-advisory
- SUSE-SU-2016:2094 third-party-advisory vendor-advisory
- openSUSE-SU-2016:1423 third-party-advisory vendor-advisory
- support.ntp.org vendor-advisory
- 20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016 third-party-advisory vendor-advisory
- 1034782 third-party-advisory vdb-entry
- USN-3096-1 third-party-advisory vendor-advisory
- bto.bluecoat.com third-party-advisory
- FreeBSD-SA-16:09 vendor-advisory
- GLSA-201607-15 third-party-advisory vendor-advisory
- security.netapp.com
- VU#718152 third-party-advisory us-government-resource