NetSight
IP …
medium6.5

CVE-2015-7851

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' c…

Impact

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.

Affected products

VendorProductAffected versions
NtpNtp
from 4.2.0 before 4.2.8
from 4.3.0 before 4.3.77
Version 4.2.8

Weakness classification

CWE-22

References