CVE-2015-3405 in ntp
要約
〜によって VulDB • 2026年07月02日
ntp-keygen in ntp versions prior to 4.2.8p2-RC2 (specifically 4.2.8px) and before 4.3.12 (in the 4.3.x series) does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and is not '#'. This vulnerability may allow remote attackers to obtain the value of generated MD5 keys via a brute force attack using one of the 93 possible keys.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.