PT-2009-6681 · Ntp+3 · Ntp+3

Harlan Stenn · Published 1970-01-01 · Updated 2024-06-15 · CVE-2009-0159

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.4p7-RC2

Description The issue is related to a stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq, which allows remote NTP servers to execute arbitrary code via a crafted response. This can lead to a disruption of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.

Recommendations For versions prior to 4.2.4p7-RC2, update to version 4.2.4p7-RC2 or later to resolve the issue. As a temporary workaround, consider restricting access to the cookedprint function in ntpq/ntpq.c to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2014-1197

BDU:2015-02159

BDU:2015-02160

BDU:2015-02161

BDU:2015-02162

BDU:2015-02163

BDU:2015-06447

BDU:2015-06448

BDU:2015-08486

BDU:2015-08487

BDU:2015-09376

CVE-2009-0159

DSA-1801-1

HPSBUX02859

OPENSUSE-SU-2024:10181-1

RHSA-2009:1039

RHSA-2009:1040

RHSA-2009:1651

RHSA-2009_1039

RHSA-2009_1040

Affected Products

Alt Linux

Hp-Ux

Ntp

Red Hat

References · 161

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/ntp/ntpd_reserved_dos.rb · Exploit
• 🔥 https://github.com/0xhav0c/CVE-2013-5211 · Exploit
• https://bdu.fstec.ru/vul/2015-09749 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10181-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2009-1039.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2009-1651.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1252 · Security Note
• https://errata.altlinux.org/ALT-PU-2014-1197 · Vendor Advisory
• http://secunia.com/advisories/35308 · Vendor Advisory
• http://vupen.com/english/advisories/2009/0999 · Vendor Advisory
• http://securityfocus.com/bid/34481 · Patch
• https://bdu.fstec.ru/vul/2015-02162 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2009:092 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08486 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3563 · Security Note