PT-2009-1072 · Ntf+2 · Ntp+2

Publicado 2009-01-07 · Atualizado 2018-10-11 · CVE-2009-0021

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions NTP versions 4.2.4 through 4.2.4p4 NTP versions 4.2.5 through 4.2.5p149 ntp before version 4.2.4 p6

Description The issue allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys. This can lead to a violation of the integrity and availability of protected information. The exploitation of the vulnerabilities can be carried out remotely.

Recommendations For NTP versions 4.2.4 through 4.2.4p4, update to version 4.2.4p5 or later. For NTP versions 4.2.5 through 4.2.5p149, update to version 4.2.5p150 or later. For ntp before version 4.2.4 p6, update to version 4.2.4 p6 or later.

Exploit

Correção

Improper Authentication

RCE

Enumeração de Fraquezas

CWE-287

CWE-20

Identificadores relacionados

ALT-PU-2014-1197

BDU:2015-09365

CVE-2009-0021

DSA-1702-1

RHSA-2009:0046

RHSA-2009_0046

Produtos afetados

Alt Linux

Ntp

Red Hat

Referências · 58

• 🔥 https://github.com/0xhav0c/CVE-2013-5211 · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_peer_list_sum_dos.rb · Nota
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_req_nonce_dos.rb · Nota
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_readvar.rb · Nota
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_peer_list_dos.rb · Nota
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_reslist_dos.rb · Nota
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_monlist.rb · Nota
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/portmap/portmap_amp.rb · Nota
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_unsettrap_dos.rb · Nota
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/udp/udp_amplification.rb · Nota
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/upnp/ssdp_amp.rb · Nota
• https://github.com/dani87/ntpscanner · Nota
• https://github.com/sepehrdaddev/ntpdos · Nota
• https://github.com/suedadam/ntpscanner · Nota
• https://bdu.fstec.ru/vul/2015-02160 · Nota de Segurança