CVE-2014-9293 in NTP Daemon
Resumen (Inglés)
The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
Reservar
2014-12-05
Divulgación
2014-12-19
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 68456 | NTP Daemon Random Generator ntp_config.c config_auth autenticación débil | 287 | No probado | Arreglo oficial | CVE-2014-9293 |