PT-2015-7643 · Ntp+3 · Ntp+4

Yves Younan · Publicado 2014-12-24 · Atualizado 2024-06-15 · CVE-2015-7851

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p4

Description The issue allows remote authenticated users to overwrite arbitrary files due to a directory traversal vulnerability in the save config function in ntpd. This vulnerability is particularly relevant on systems that do not use '' or '/' characters for directory separation, such as OpenVMS.

Recommendations For versions prior to 4.2.8p4, update to version 4.2.8p4 or later to resolve the issue. As a temporary workaround, consider restricting access to the save config function in ntpd to minimize the risk of exploitation.

Exploit

Correção

DoS

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

ALT-PU-2014-2486

CVE-2015-7851

DLA-335-1

DSA-3388-1

OPENSUSE-SU-2024:10181-1

SUSE-SU-2015:2058-1

SUSE-SU-2016:1247-1

SUSE-SU-2016:1311-1

Produtos afetados

Alt Linux

Cisco Ios Xe

Cisco Nexus

Ntp

Suse

Referências · 189

• 🔥 http://talosintel.com/reports/TALOS-2015-0062 · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_nak_to_the_future.rb · Nota
• https://github.com/MacMiniVault/NTPUpdateSnowLeopard · Nota
• https://exploit-db.com/exploits/40840 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1799 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-2516 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5194 · Nota de Segurança
• https://security-tracker.debian.org/tracker/source-package/ntp · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-9293 · Nota
• https://bugzilla.suse.com/962960 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2016:1311-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1798 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-06450 · Nota de Segurança
• https://t.me/cvenotify/535 · Publicação no Telegram
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295 · Nota de Segurança