Описание
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
Ссылки
- Vendor Advisory
- Third Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Issue TrackingThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Issue TrackingThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 4.2.6 (включая) до 4.2.8 (исключая)Версия от 4.3.0 (включая) до 4.3.77 (исключая)
Одно из
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p186:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p187:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p188:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p189:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p190:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p191:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p192:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p193:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p194:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p195:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p196:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p197:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p198:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p199:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p200:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p201:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p202:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p203:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p204:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p205:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p206:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p207:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p208:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p209:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p210:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p211:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p212:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p213:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p214:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p215:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p216:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p217:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p218:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p219:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p220:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p221:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p222:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p223:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p224:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p225:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p226:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p227:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p228:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p229:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p230:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p231_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p232_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p233_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p234_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p235_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p236_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p237_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p238_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p239_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p240_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p241_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p242_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p243_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p244_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p245_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p246_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p247_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p248_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p249_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.5:p250_rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Конфигурация 3
Одно из
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:clustered_data_ontap:*:*
cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:data_ontap:-:*:*:*:*:7-mode:*:*
EPSS
Процентиль: 99%
0.7962
Высокий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-287
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 8 лет назад
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
redhat
больше 10 лет назад
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
CVSS3: 9.8
debian
больше 8 лет назад
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x befo ...
CVSS3: 9.8
github
больше 3 лет назад
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
fstec
больше 10 лет назад
Уязвимость пакетов Crypto-NAK демон-программы ntpd протокола сетевого времени NTP, позволяющая нарушителю обойти процедуру аутентификации
EPSS
Процентиль: 99%
0.7962
Высокий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-287