RHSA-2009:1039

csafUSredhat_csaf

Red Hat Security Advisory: ntp security update

view advisory published 2009-05-18

An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2009-1252USmedium6.8—
Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote…
CVE-2009-0159USmedium6.8—
Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
02

references

External citations — patches, advisories, analysis.

03

remediations (32)

  • Fixedntp-0:4.2.2p1-9.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.src as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.src as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-0:4.2.2p1-9.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
  • Fixedntp-debuginfo-0:4.2.2p1-9.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

    https://access.redhat.com/errata/RHSA-2009:1039
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan