Red Hat Security Advisory: ntp security update
Updated ntp packages that fix several security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-9295US | high7.5 | Exploit | ||
Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function whe… | ||||
| CVE-2014-9294US | high7.5 | — | ||
util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-f… | ||||
| CVE-2014-9293US | high7.5 | — | ||
The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat crypto… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2014:2025self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 1176032external
- 1176035external
- 1176037external
- Canonical URLself
remediations (80)
- Fixedntp-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.src as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.src as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.src as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Fixedntp-debuginfo-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2014:2025 - Workaroundntp-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-0:4.2.2p1-18.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-0:4.2.2p1-18.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-0:4.2.2p1-18.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-0:4.2.2p1-18.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-0:4.2.2p1-18.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-0:4.2.2p1-18.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-0:4.2.2p1-18.el5_11.src as a component of Red Hat Enterprise Linux (v. 5 server)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-0:4.2.2p1-18.el5_11.src as a component of Red Hat Enterprise Linux (v. 5 server)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-0:4.2.2p1-18.el5_11.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-0:4.2.2p1-18.el5_11.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Add these lines (included by default starting with Red Hat Enterprise Linux 5) to the configuration file /etc/ntp.conf: restrict default kod nomodify notrap nopeer noquery restrict -6 default kod nomodify notrap nopeer noquery restrict 127.0.0.1 restrict -6 ::1 This restricts server-type functionality to localhost. If ntpd needs to perform time service for specific hosts and networks, you have to list them with suitable restrict statements.
- Workaroundntp-debuginfo-0:4.2.2p1-18.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
Issue these commands to explicitly generate a strong key and add it to the ntpd configuration: echo trustedkey 65535 >> /etc/ntp.conf printf "65535\tM\t%s\n" $(tr -cd a-zA-Z0-9 < /dev/urandom | head -c 16) >> /etc/ntp/keys The generated key has about 95 bits of entropy.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan