RHSA-2009:1039: Important: ntp security update
The Network Time Protocol (NTP) is used to synchronize a computer's timewith a referenced time source.A buffer overflow flaw was discovered in the ntpd daemon's NTPv4authentication code. If ntpd was configured to use public key cryptographyfor NTP packet authentication, a remote attacker could use this flaw tosend a specially-crafted request packet that could crash ntpd.(CVE-2009-1252)Note: NTP authentication is not enabled by default.A buffer overflow flaw was found in the ntpq diagnostic command. Amalicious, remote server could send a specially-crafted reply to an ntpqrequest that could crash ntpq. (CVE-2009-0159)All ntp users are advised to upgrade to this updated package, whichcontains backported patches to resolve these issues. After installing theupdate, the ntpd daemon will be restarted automatically.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:1039?
The severity of RHSA-2009:1039 is classified as important.
How do I fix RHSA-2009:1039?
To fix RHSA-2009:1039, you should upgrade to the ntp package version 4.2.2p1-9.el5_3.2 or later.
What causes the vulnerability in RHSA-2009:1039?
The vulnerability in RHSA-2009:1039 is caused by a buffer overflow flaw in the ntpd daemon's NTPv4 authentication code.
Which systems are affected by RHSA-2009:1039?
RHSA-2009:1039 affects systems running the ntp package version 4.2.2p1-9.el5_3.2 or earlier.
Is public key cryptography affected in RHSA-2009:1039?
Yes, public key cryptography for NTP packet authentication is affected by the vulnerability outlined in RHSA-2009:1039.