NetSight
critical10.0Public exploit code

CVE-2001-0414

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrar…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.

Affected products

VendorProductAffected versions
Dave MillsNtpd
through 4.0.99k
Versions 4.0.99, 4.0.99a, 4.0.99b, 4.0.99c, 4.0.99d
Dave MillsXntp3
Versions 5.93, 5.93a, 5.93b, 5.93c, 5.93d, 5.93e

References