Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qp94-wj83-fxfq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.

EPSS

Процентиль: 67%
0.00532
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 6 лет назад

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.

redhat
больше 10 лет назад

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.

CVSS3: 6.5
nvd
около 6 лет назад

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.

CVSS3: 6.5
debian
около 6 лет назад

Directory traversal vulnerability in the save_config function in ntpd ...

suse-cvrf
около 10 лет назад

Security update for ntp

EPSS

Процентиль: 67%
0.00532
Низкий