PT-2009-1072 · Ntf+2 · Ntp+2

Published 2009-01-07 · Updated 2018-10-11 · CVE-2009-0021

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions NTP versions 4.2.4 through 4.2.4p4 NTP versions 4.2.5 through 4.2.5p149 ntp before version 4.2.4 p6

Description The issue allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys. This can lead to a violation of the integrity and availability of protected information. The exploitation of the vulnerabilities can be carried out remotely.

Recommendations For NTP versions 4.2.4 through 4.2.4p4, update to version 4.2.4p5 or later. For NTP versions 4.2.5 through 4.2.5p149, update to version 4.2.5p150 or later. For ntp before version 4.2.4 p6, update to version 4.2.4 p6 or later.

Exploit

Fix

Improper Authentication

RCE

Weakness Enumeration

CWE-287

CWE-20

Related Identifiers

ALT-PU-2014-1197

BDU:2015-09365

CVE-2009-0021

DSA-1702-1

RHSA-2009:0046

RHSA-2009_0046

Affected Products

Alt Linux

Ntp

Red Hat

References · 58

• 🔥 https://github.com/0xhav0c/CVE-2013-5211 · Exploit
• https://bdu.fstec.ru/vul/2015-02160 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-5211 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09749 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211 · Security Note
• https://bdu.fstec.ru/vul/2015-09365 · Security Note
• http://secunia.com/advisories/35074 · Vendor Advisory
• http://secunia.com/advisories/33558 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-0021 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0046.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0159 · Security Note
• https://errata.altlinux.org/ALT-PU-2014-1197 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06448 · Security Note
• http://vupen.com/english/advisories/2009/1297 · Vendor Advisory