REDHAT-BUG-499694
First published: Thu May 07 2009(Updated: )
CERT has reported a vulnerability in ntp (VU#853097). If autokey is enabled, a remote attacker can send a carefully crafted packet that can overflow a stack buffer, potentially allowing for the execution of arbitrary code with the privileges of the ntpd process. This is corrected upstream in versions 4.2.4p7 and 4.2.5p74, and affects ntp 4.2.4 (and possibly earlier). This issue can also be mitigated by ensuring autokey support is not enabled. By default, Red Hat Enterprise Linux defaults to running ntpd unprivileged with the ntpd user. This issue has been assigned <a href="https://access.redhat.com/security/cve/CVE-2009-1252">CVE-2009-1252</a>.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NTP | <4.2.4 | |
| NTP | >=4.2.4<4.2.5p74 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2009-1252
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=343833&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=343833&action=edit
- http://support.ntp.org/security
- https://support.ntp.org/bugs/show_bug.cgi?id=1151
- https://rhn.redhat.com/errata/RHSA-2009-1039.html
- https://rhn.redhat.com/errata/RHSA-2009-1040.html
- http://admin.fedoraproject.org/updates/ntp-4.2.4p7-1.fc9
- http://admin.fedoraproject.org/updates/ntp-4.2.4p7-1.fc10
- http://admin.fedoraproject.org/updates/ntp-4.2.4p7-1.fc11
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1252
- https://launchpad.net/bugs/cve/2009-1252
- http://www.kb.cert.org/vuls/id/853097
- http://www.securityfocus.com/bid/35017
- http://admin.fedoraproject.org/updates/ntp-4.2.4p7-2.fc11
- https://bugzilla.redhat.com/show_bug.cgi?id=499694
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2009-1252
- agent/source
- agent/severity
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ntp
- canonical/ntp