Page 1 of 1

Multiple NTP vulnerabilities with potential root access

PostPosted: Fri Dec 19, 2014 8:50 pm
by Zancarius
As of Dec. 18-19, multiple NTP vulnerabilities were disclosed including at least one that may provide an attacker with an exploit pathway for gaining root-level access on a machine:

http://support.ntp.org/bin/view/Main/Se ... tl_putdata

Updating to NTP 4.2.8 or later is recommended.