|
|
|
Red Hat, Inc. Information for VU#970472
| Date Notified | 04/05/2001 |
| Date Modified | 05/22/2008 12:42:45 PM |
| Status Summary | Vulnerable |
Vendor StatementNo direct statement is currently available from the vendor regarding this vulnerability.AddendumRedHat has issued an advisory regarding this issue at:
http://www.redhat.com/support/errata/RHSA-2001-045.html
An excerpt:
The Network Time Daemon (xntpd on Red Hat Linux 6.2 and earlier, ntpd on
Red Hat Linux 7.0) does not properly check the size of a buffer used to
hold incoming data from the network. Potentially, an attacker could gain
root access by exploiting this weakness.
Potential damage is mitigated by the fact that the Network Time Daemon is
not enabled by default. If you are not using network time services, it
may not even be installed. As a general rule, Red Hat encourages users to
enable only those network services they actually need.
If you have feedback, comments, or additional information about this vulnerability, please send us
email.
|
 |
