PT-2015-7643 · Ntp+3 · Ntp+4

Yves Younan · Published 2014-12-24 · Updated 2024-06-15 · CVE-2015-7851

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p4

Description The issue allows remote authenticated users to overwrite arbitrary files due to a directory traversal vulnerability in the save config function in ntpd. This vulnerability is particularly relevant on systems that do not use '' or '/' characters for directory separation, such as OpenVMS.

Recommendations For versions prior to 4.2.8p4, update to version 4.2.8p4 or later to resolve the issue. As a temporary workaround, consider restricting access to the save config function in ntpd to minimize the risk of exploitation.

Exploit

Fix

DoS

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALT-PU-2014-2486

CVE-2015-7851

DLA-335-1

DSA-3388-1

OPENSUSE-SU-2024:10181-1

SUSE-SU-2015:2058-1

SUSE-SU-2016:1247-1

SUSE-SU-2016:1311-1

Affected Products

Alt Linux

Cisco Ios Xe

Cisco Nexus

Ntp

Suse

References · 189

• 🔥 http://talosintel.com/reports/TALOS-2015-0062 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1799 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5194 · Security Note
• https://security-tracker.debian.org/tracker/source-package/ntp · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1311-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1798 · Security Note
• https://bdu.fstec.ru/vul/2015-06450 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295 · Security Note
• https://bdu.fstec.ru/vul/2015-06453 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7703 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7702 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02039 · Security Note
• https://bdu.fstec.ru/vul/2015-10238 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2015-7851 · Vendor Advisory