FreeBSD, Inc. Information for VU#970472

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01%3a31.ntpd.asc

Addendum

The FreeBSD ports collection does contain a vulnerable version of ntpd.

A patch has been made available at:

http://www.freebsd.org/cgi/cvsweb.cgi/src/contrib/ntp/ntpd/ntp_control.c?r1+=1.1&r2=1.2

This was in response to Problem Report 26358:

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=26358

If you have feedback, comments, or additional information about this vulnerability, please send us email.