CVE-2009-0159: Buffer Overflow
Apple Security Team reported a stack buffer overflow exists in the ntpq program. When the ntpq program is used to request peer information from a remote time server, a maliciously crafted response may lead to an unexpected application termination or arbitrary code execution.
Problem exists in cookedprint() function in ntpq.c, when server-supplied numeric value is sprintf-ed to the buffer that is not large enough to hold string representation of the maximum possible value.
Other sources
Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0159?
CVE-2009-0159 is considered a critical vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2009-0159?
To fix CVE-2009-0159, update to a version of the NTP software that is not affected, generally versions after 4.2.4p7.
What systems are affected by CVE-2009-0159?
CVE-2009-0159 affects multiple versions of NTP including 4.0.72, 4.0.98, and several others prior to the patched versions.
Can CVE-2009-0159 be exploited remotely?
Yes, CVE-2009-0159 can be exploited remotely when the ntpq program interacts with a malicious time server.
What data could be compromised by CVE-2009-0159?
CVE-2009-0159 could potentially allow attackers to execute arbitrary code and gain unauthorized access to affected systems.