NTP: Multiple Vendors NTP Daemon Autokey Stack Buffer Overflow
This signature detects attempts to exploit a known vulnerability in Multiple Vendors NTP Daemon. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.
Extended Description
The 'ntpd' daemon is prone to a stack-based buffer-overflow vulnerability when it is configured to use the 'autokey' OpenSSL protocol. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attempts will likely crash the application, causing denial-of-service conditions.
Affected Products
Ntp ntpd,Avaya communication_manager
Short Name
NTP:MUL-NTP-DAEMON-AUTOKEY-BOF
Severity
Major
Recommended
False
Recommended Action
Drop
Category
NTP
Keywords
Autokey Buffer CVE-2009-1252 Daemon Multiple NTP Overflow Stack Vendors bid:35017
Release Date
07/21/2011
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Red_hat
Suse
Freebsd
Gentoo
Ntp
Hp
Avaya
Vmware
Slackware
Ubuntu
Mandriva
Netbsd
Debian
Rpath
Pardus
CVSS Score
6.8