Back to feed
EUVD-2015-7604 · Published Jul 24, 2017
The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.
Technologies
Netapp Oncommand Performance ManagerRedhat Enterprise Linux WorkstationRedhat Enterprise Linux ServerNtp NtpRedhat Enterprise Linux Server AusNetapp Data OntapOracle LinuxNetapp Clustered Data OntapRedhat Enterprise Linux DesktopRedhat Enterprise Linux Server EusRedhat Enterprise Linux Server TusNetapp Oncommand Unified ManagerDebian Debian Linux
Weaknesses
CWE-20
CVSS scores
- v3.17.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - v2.04.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://rhn.redhat.com/errata/RHSA-2016-0780.html
- http://rhn.redhat.com/errata/RHSA-2016-2583.html
- http://support.ntp.org/bin/view/Main/NtpBug2902
- http://www.debian.org/security/2015/dsa-3388
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securityfocus.com/bid/77278
Potentially impacted assets
See if this affects your attack surface
