CVE-2015-7976

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

Weaknesses (CWE)

CWE-254

Affected Products (108)

ntp · ntpvulnerable

...and 58 more

References (20)

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html

Third Party Advisory

http://support.ntp.org/bin/view/Main/NtpBug2938

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd

Third Party Advisory

http://www.securitytracker.com/id/1034782

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-3096-1

Third Party Advisory

https://bto.bluecoat.com/security-advisory/sa113

Third Party Advisory

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc

https://security.gentoo.org/glsa/201607-15

Third Party Advisory

https://security.netapp.com/advisory/ntap-20171031-0001/

https://www.kb.cert.org/vuls/id/718152

Third Party AdvisoryUS Government Resource

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html

Third Party Advisory