Oval Definition:
oval:org.mitre.oval:def:5411
Revision Date
:
2015-05-18
Version
:
27
Title
:
HP-UX Running XNTP, Remote Execution of Arbitrary Code
Description
:
Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
Family
:
unix
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2009-0159
Platform(s)
:
HP-UX 11
Product(s)
:
Definition Synopsis
Criteria meets HP Security Bulletin HPSBUX02437
HP-UX B.11.23
AND
InternetSrvcs.INETSVCS2-BOOT is installed
AND
NOT
Patch PHNE_39872 is installed
OR
Criteria meets HP Security Bulletin HPSBUX02437
HP-UX B.11.11
AND
InternetSrvcs.INETSVCS-BOOT is installed
AND
NOT
Patch PHNE_39871 is installed
OR
Criteria meets HP Security Bulletin HPSBUX02437
HP-UX B.11.31
AND
NTP.NTP-RUN is installed
AND
NOT
Patch PHNE_39873 is installed
BACK