Oval Definition:oval:org.mitre.oval:def:8042
Revision Date:2014-06-23Version:18
Title:DSA-1801 ntp -- buffer overflows
Description:Several remote vulnerabilities have been discovered in NTP, the Network Time Protocol reference implementation. The Common Vulnerabilities and Exposures project identifies the following problems: A buffer overflow in ntpq allow a remote NTP server to create a denial of service attack or to execute arbitrary code via a crafted response. A buffer overflow in ntpd allows a remote attacker to create a denial of service attack or to execute arbitrary code when the autokey functionality is enabled.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-0159
CVE-2009-1252
DSA-1801
Platform(s):Debian GNU/Linux 4.0
Debian GNU/Linux 5.0
Product(s):ntp
Definition Synopsis
  • Release section
  • Debian GNU/Linux 5.0 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND ntp-doc is earlier than 4.2.4p4+dfsg-8lenny2
  • OR Architecture dependent section
  • Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is arm
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is powerpc
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND Packages section
  • ntp is earlier than 4.2.4p4+dfsg-8lenny2
  • OR ntpdate is earlier than 4.2.4p4+dfsg-8lenny2
  • OR Release section
  • Debian GNU/Linux 4.0 is installed.
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND Packages section
  • ntp-doc is earlier than 4.2.2.p4+dfsg-2etch3
  • OR ntp-simple is earlier than 4.2.2.p4+dfsg-2etch3
  • OR ntp-refclock is earlier than 4.2.2.p4+dfsg-2etch3
  • OR ntpdate is earlier than 4.2.2.p4+dfsg-2etch3
  • OR ntp is earlier than 4.2.2.p4+dfsg-2etch3
  • BACK