• info
• discussion
• exploit
• solution
• references

NTPD Insecure Privileges Vulnerability

Solution:
The vendor has released an update to correct this vulnerability.

Please see the referenced advisories for more information.


Red Hat Fedora Core3

• Redhat Fedora ntp-4.2.0.a.20040617-5.FC3.i386.rpm
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/i386 /ntp-4.2.0.a.20040617-5.FC3.i386.rpm

Conectiva Linux 10.0

• Conectiva nss_ldap-240-53589U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/nss_ldap-240-53589U10_1cl. i386.rpm


• Conectiva nss_ldap-240-53589U10_1cl.i386.rpm
  Conectiva 10:
  nss_ldap-240-53589U10_1cl.i386.rpm


• Conectiva ntp-4.2.0-60068U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/ntp-4.2.0-60068U10_1cl.i38 6.rpm


• Conectiva ntp-doc-4.2.0-60068U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/ntp-doc-4.2.0-60068U10_1cl .i386.rpm


• Conectiva pam_ldap-180-47667U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/pam_ldap-180-47667U10_1cl. i386.rpm

NTP NTPd 4.0

• NTP ntp-dev-4.2.0b-20050827.tar.gz
  http://ntp.isc.org/Main/DownloadViaHTTP?file=ntp4/snapshots/ntp-dev/20 05/08/ntp-dev-4.2.0b-20050827.tar.gz

NTP NTPd 4.1

• NTP ntp-dev-4.2.0b-20050827.tar.gz
  http://ntp.isc.org/Main/DownloadViaHTTP?file=ntp4/snapshots/ntp-dev/20 05/08/ntp-dev-4.2.0b-20050827.tar.gz

NTP NTPd 4.2

• Mandriva ntp-4.2.0-18.1.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva ntp-4.2.0-18.1.102mdk.x86_64.rpm
  Mandrakelinux 10.2/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva ntp-client-4.2.0-18.1.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva ntp-client-4.2.0-18.1.102mdk.x86_64.rpm
  Mandrakelinux 10.2/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• NTP ntp-dev-4.2.0b-20050827.tar.gz
  http://ntp.isc.org/Main/DownloadViaHTTP?file=ntp4/snapshots/ntp-dev/20 05/08/ntp-dev-4.2.0b-20050827.tar.gz

NTP NTPd 4.2 .0a

• Debian ntp-doc_4.2.0a+stable-2sarge1_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-doc_4.2.0a+stab le-2sarge1_all.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_alpha.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_amd64.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_arm.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_hppa.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_i386.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_ia64.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_m68k.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_mips.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_mipsel.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_powerpc.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_s390.deb


• Debian ntp-refclock_4.2.0a+stable-2sarge1_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-refclock_4.2.0a +stable-2sarge1_sparc.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_alpha.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_amd64.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_arm.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_hppa.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_i386.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_ia64.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_m68k.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_mips.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_mipsel.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_powerpc.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_s390.deb


• Debian ntp-server_4.2.0a+stable-2sarge1_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-server_4.2.0a+s table-2sarge1_sparc.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_alpha.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_amd64.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_arm.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_hppa.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_i386.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_ia64.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_m68k.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_mips.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_mipsel.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_powerpc.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_s390.deb


• Debian ntp-simple_4.2.0a+stable-2sarge1_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp-simple_4.2.0a+s table-2sarge1_sparc.deb


• Debian ntp_4.2.0a+stable-2sarge1_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_alpha.deb


• Debian ntp_4.2.0a+stable-2sarge1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_amd64.deb


• Debian ntp_4.2.0a+stable-2sarge1_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_arm.deb


• Debian ntp_4.2.0a+stable-2sarge1_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_hppa.deb


• Debian ntp_4.2.0a+stable-2sarge1_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_i386.deb


• Debian ntp_4.2.0a+stable-2sarge1_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_ia64.deb


• Debian ntp_4.2.0a+stable-2sarge1_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_m68k.deb


• Debian ntp_4.2.0a+stable-2sarge1_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_mips.deb


• Debian ntp_4.2.0a+stable-2sarge1_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_mipsel.deb


• Debian ntp_4.2.0a+stable-2sarge1_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_powerpc.deb


• Debian ntp_4.2.0a+stable-2sarge1_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_s390.deb


• Debian ntp_4.2.0a+stable-2sarge1_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntp_4.2.0a+stable-2 sarge1_sparc.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_alpha.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_amd64.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_arm.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_hppa.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_i386.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_ia64.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_m68k.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_mips.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_mipsel.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_powerpc.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_s390.deb


• Debian ntpdate_4.2.0a+stable-2sarge1_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/ntp/ntpdate_4.2.0a+stab le-2sarge1_sparc.deb


• NTP ntp-dev-4.2.0b-20050827.tar.gz
  http://ntp.isc.org/Main/DownloadViaHTTP?file=ntp4/snapshots/ntp-dev/20 05/08/ntp-dev-4.2.0b-20050827.tar.gz


• Ubuntu ntp-doc_4.2.0a-10ubuntu2.1_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntp-doc_4.2.0a-10ubu ntu2.1_all.deb


• Ubuntu ntp-refclock_4.2.0a-10ubuntu2.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/n/ntp/ntp-refclock_4.2 .0a-10ubuntu2.1_amd64.deb


• Ubuntu ntp-refclock_4.2.0a-10ubuntu2.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/n/ntp/ntp-refclock_4.2 .0a-10ubuntu2.1_i386.deb


• Ubuntu ntp-refclock_4.2.0a-10ubuntu2.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/n/ntp/ntp-refclock_4.2 .0a-10ubuntu2.1_powerpc.deb


• Ubuntu ntp-server_4.2.0a-10ubuntu2.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntp-server_4.2.0a-10 ubuntu2.1_amd64.deb


• Ubuntu ntp-server_4.2.0a-10ubuntu2.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntp-server_4.2.0a-10 ubuntu2.1_i386.deb


• Ubuntu ntp-server_4.2.0a-10ubuntu2.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntp-server_4.2.0a-10 ubuntu2.1_powerpc.deb


• Ubuntu ntp-simple_4.2.0a-10ubuntu2.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntp-simple_4.2.0a-10 ubuntu2.1_amd64.deb


• Ubuntu ntp-simple_4.2.0a-10ubuntu2.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntp-simple_4.2.0a-10 ubuntu2.1_i386.deb


• Ubuntu ntp-simple_4.2.0a-10ubuntu2.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntp-simple_4.2.0a-10 ubuntu2.1_powerpc.deb


• Ubuntu ntp_4.2.0a-10ubuntu2.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntp_4.2.0a-10ubuntu2 .1_amd64.deb


• Ubuntu ntp_4.2.0a-10ubuntu2.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntp_4.2.0a-10ubuntu2 .1_i386.deb


• Ubuntu ntp_4.2.0a-10ubuntu2.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntp_4.2.0a-10ubuntu2 .1_powerpc.deb


• Ubuntu ntpdate_4.2.0a-10ubuntu2.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntpdate_4.2.0a-10ubu ntu2.1_amd64.deb


• Ubuntu ntpdate_4.2.0a-10ubuntu2.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntpdate_4.2.0a-10ubu ntu2.1_i386.deb


• Ubuntu ntpdate_4.2.0a-10ubuntu2.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/ntp/ntpdate_4.2.0a-10ubu ntu2.1_powerpc.deb