Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/584606 | Patch Third Party Advisory US Government Resource |
http://marc.info/?l=bugtraq&m=108922292425219&w=2 | Mailing List Third Party Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/15406 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2004-08-05 21:00
Updated : 2020-06-18 09:33
NVD link : CVE-2004-0657
Mitre link : CVE-2004-0657
JSON object : View
CWE
CWE-190
Integer Overflow or Wraparound
Products Affected
ntp
- ntp
hp
- tru64_unix