|
|
|
View Notes By
|
|
|
|
Other Documents
|
|
|
|
|
Red Hat, Inc. Information for VU#970472
| Date Notified: | 2001-04-05 |
| Date Updated: | |
| Statement Date: | |
| Status Summary: | Vulnerable |
Vendor StatementNo direct statement is currently available from the vendor regarding this vulnerability.Vendor InformationThe vendor has not provided us with any further information regarding this vulnerability.
Vendor References
AddendumRedHat has issued an advisory regarding this issue at:
http://www.redhat.com/support/errata/RHSA-2001-045.html
An excerpt:
The Network Time Daemon (xntpd on Red Hat Linux 6.2 and earlier, ntpd on
Red Hat Linux 7.0) does not properly check the size of a buffer used to
hold incoming data from the network. Potentially, an attacker could gain
root access by exploiting this weakness.
Potential damage is mitigated by the fact that the Network Time Daemon is
not enabled by default. If you are not using network time services, it
may not even be installed. As a general rule, Red Hat encourages users to
enable only those network services they actually need.
If you have feedback, comments, or additional information about this vulnerability, please send us
email.
|
 |
