CVE-2015-3405 in ntp
सारांश
द्वारा VulDB • 22/07/2026
ntp-keygen in ntp versions before 4.2.8p2-RC2 (specifically 4.2.8px) and before 4.3.12 (in the 4.3.x series) does not generate MD5 keys with sufficient entropy on big-endian machines when the lowest-order byte of the temp variable is between 0x20 and 0x7f and is not '#'. This vulnerability may allow remote attackers to obtain the value of generated MD5 keys via a brute-force attack using any of the 93 possible key values.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.