An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The Network Time Protocol (NTP) is used to synchronize a computer's time with a referenced time source.

A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authentication code. If ntpd was configured to use public key cryptography for NTP packet authentication, a remote attacker could use this flaw to send a specially crafted request packet that could crash ntpd. (CVE-2009-1252)

Note: NTP authentication is not enabled by default.

A buffer overflow flaw was found in the ntpq diagnostic command. A malicious, remote server could send a specially crafted reply to an ntpq request that could crash ntpq. (CVE-2009-0159)

All ntp users are advised to upgrade to this updated package, which contains backported patches to resolve these issues. After installing the update, the ntpd daemon will be restarted automatically.

来自 Red Hat 安全公告 2009:1040：

更新后的 ntp 程序包修复了两个安全问题，现在可用于 Red Hat Enterprise Linux 4。

Red Hat 安全响应团队将此更新评级为具有严重安全影响。

网络时间协议 (NTP) 用于将计算机的时间与引用时间源进行同步。

在 ntpd 后台程序的 NTPv4 认证代码中发现一个缓冲区溢出缺陷。如果 ntpd 被配置为使用公钥加密进行 NTP 数据包的认证，则远程攻击者可利用这一缺陷发送特别构建的请求数据包，使 ntpd 崩溃，或可能以 'ntp' 用户的权限执行任意代码。(CVE-2009-1252)

注意：默认情况下未启用 NTP 认证。

在 ntpq 诊断命令中发现一个缓冲区溢出缺陷。恶意远程服务器可向 ntpq 请求发送特别构建的回复，这可能使 ntpq 崩溃，或可能以运行 ntpq 命令用户的权限执行任意代码。
(CVE-2009-0159)

建议所有 ntp 用户升级此更新后的程序包，其中包含用于解决这些问题的向后移植的修补程序。安装更新后，ntpd 后台程序将自动重新启动。

更新后的 ntp 程序包修复了两个安全问题，现在可用于 Red Hat Enterprise Linux 4。

Red Hat 安全响应团队将此更新评级为具有严重安全影响。

网络时间协议 (NTP) 用于将计算机的时间与引用时间源进行同步。

在 ntpd 后台程序的 NTPv4 认证代码中发现一个缓冲区溢出缺陷。如果 ntpd 被配置为使用公钥加密进行 NTP 数据包的认证，则远程攻击者可利用这一缺陷发送特别构建的请求数据包，使 ntpd 崩溃，或可能以 'ntp' 用户的权限执行任意代码。(CVE-2009-1252)

注意：默认情况下未启用 NTP 认证。

在 ntpq 诊断命令中发现一个缓冲区溢出缺陷。恶意远程服务器可向 ntpq 请求发送特别构建的回复，这可能使 ntpq 崩溃，或可能以运行 ntpq 命令用户的权限执行任意代码。
(CVE-2009-0159)

建议所有 ntp 用户升级此更新后的程序包，其中包含用于解决这些问题的向后移植的修补程序。安装更新后，ntpd 后台程序将自动重新启动。

远程 OracleVM 系统缺少必要修补程序来解决关键安全更新：

- 删除 ntp.conf 中的默认 ntp 服务器 [缺陷 14342986]

- 不为解析器生成弱控制密钥 (CVE-2014-9293)

- 不在 ntp-keygen 中生成弱 MD5 密钥 (CVE-2014-9294)

- 修复通过特别构建的数据包造成的缓冲区溢出 (CVE-2014-9295)

- 再次增加 memlock 限制 (#1035198)

- 允许选择私钥文件的密码 (#741573)

- 恢复 init 脚本优先级（#470945、#689636）

- 终止试用修补程序 (#489835)

- 将 restorecon 调用移动到 %posttrans

- 在 ntpd 上调用 restorecon 并在 start 上调用 ntpdate (#470945)

- 在使用超过 512 个本地地址时不会崩溃 (#661934)

- 添加 -I 选项 (#528799)

- 修复 -L 选项，不再需要参数 (#460434)

- 将 ntpd 和 ntpdate 移动到 /sbin，并在引导时提前启动（#470945、#689636）

- 增加 memlock 限制 (#575874)

- 忽略试用地址 (#489835)

- 打印同步距离，而不是 ntpstat 中的分散 (#679034)

- 修复 ntpq 和 ntp-keygen 手册页中的拼写错误（#664524、#664525）

- 详尽说明 ntpd -q 描述 (#591838)

- 不验证 ntp.conf (#481151)

- 替换 Prereq 标签

- 修复模式 7 数据包的 DoS（#532640、CVE-2009-3563）

- 使用 -fno-strict-aliasing 编译

- 修复解析 Autokey 关联消息时发生的缓冲区溢出（#500784，CVE-2009-1252）

- 修复 ntpq 中的缓冲区溢出（#500784，CVE-2009-0159）

- 修复畸形签名检查（#479699，CVE-2009-0021）

Several remote vulnerabilities have been discovered in NTP, the Network Time Protocol reference implementation. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-0159     A buffer overflow in ntpq allow a remote NTP server to     create a denial of service attack or to execute     arbitrary code via a crafted response.

  - CVE-2009-1252     A buffer overflow in ntpd allows a remote attacker to     create a denial of service attack or to execute     arbitrary code when the autokey functionality is     enabled.

A vulnerability has been found and corrected in ntp :

A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authentication code. If ntpd was configured to use public key cryptography for NTP packet authentication, a remote attacker could use this flaw to send a specially crafted request packet that could crash ntpd (CVE-2009-1252).

The updated packages have been patched to prevent this.

A stack-based buffer overflow was discovered in ntpq. If a user were tricked into connecting to a malicious ntp server, a remote attacker could cause a denial of service in ntpq, or possibly execute arbitrary code with the privileges of the user invoking the program.
(CVE-2009-0159)

Chris Ries discovered a stack-based overflow in ntp. If ntp was configured to use autokey, a remote attacker could send a crafted packet to cause a denial of service, or possibly execute arbitrary code. (CVE-2009-1252).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New ntp packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues.

This update fixes a remote buffer overflow in xntp/ntp which can be exploited when autokey is enabled to execute arbitrary code.
(CVE-2009-1252) This upfate fixes a buffer overflow in ntpd that can be triggered by a malicious server. (CVE-2009-0159)

A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authentication code. If ntpd was configured to use public key cryptography for NTP packet authentication, a remote attacker could use this flaw to send a specially crafted request packet that could crash ntpd or, potentially, execute arbitrary code with the privileges of the 'ntp' user. (CVE-2009-1252)

Note: NTP authentication is not enabled by default.

A buffer overflow flaw was found in the ntpq diagnostic command. A malicious, remote server could send a specially crafted reply to an ntpq request that could crash ntpq or, potentially, execute arbitrary code with the privileges of the user running the ntpq command.
(CVE-2009-0159)

After installing the update, the ntpd daemon will be restarted automatically.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components :

  - Apache Geronimo
  - Apache Tomcat
  - Apache Xerces2
  - cURL/libcURL
  - ISC BIND
  - Libxml2
  - Linux kernel
  - Linux kernel 64-bit
  - Linux kernel Common Internet File System
  - Linux kernel eCryptfs
  - NTP
  - Python
  - Java Runtime Environment (JRE)
  - Java SE Development Kit (JDK)
  - Java SE Abstract Window Toolkit (AWT)
  - Java SE Plugin
  - Java SE Provider
  - Java SE Swing
  - Java SE Web Start

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
43750	CentOS 5 : ntp (CESA-2009:1039)	Nessus	CentOS Local Security Checks	2010/1/6	2021/1/4	medium
67861	Oracle Linux 4：ntp (ELSA-2009-1040)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
67066	CentOS 4：ntp (CESA-2009:1040)	Nessus	CentOS Local Security Checks	2013/6/29	2021/1/4	medium
80394	OracleVM 3.2：ntp (OVMSA-2015-0001)	Nessus	OracleVM Local Security Checks	2015/1/7	2021/1/4	high
38833	Debian DSA-1801-1 : ntp - buffer overflows	Nessus	Debian Local Security Checks	2009/5/20	2021/1/4	medium
38844	Mandriva Linux Security Advisory : ntp (MDVSA-2009:117)	Nessus	Mandriva Local Security Checks	2009/5/20	2021/1/6	medium
38848	Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : ntp vulnerabilities (USN-777-1)	Nessus	Ubuntu Local Security Checks	2009/5/20	2021/1/19	medium
39008	Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 8.1 / 9.0 / 9.1 / current : ntp (SSA:2009-154-01)	Nessus	Slackware Local Security Checks	2009/6/4	2021/1/14	medium
41441	SuSE 11 Security Update : ntp (SAT Patch Number 863)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	medium
60586	Scientific Linux Security Update : ntp on SL4.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
89117	VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2009-0016) (remote check)	Nessus	Misc.	2016/3/3	2021/1/6	critical

检测

插件搜索

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

critical