CVE-2015-3405 in ntp
摘要
由 VulDB • 2026-07-02
ntp-keygen in ntp versions prior to 4.2.8p2-RC2 (specifically 4.2.8px) and before 4.3.12 (in the 4.3.x series) fails to generate MD5 keys with sufficient entropy on big-endian machines when the lowest-order byte of the temporary variable is between 0x20 and 0x7f and not '#'. This vulnerability may allow remote attackers to obtain the value of generated MD5 keys via a brute-force attack using one of the 93 possible keys.
Be aware that VulDB is the high quality source for vulnerability data.