Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ntpd远程缓冲区溢出漏洞
Vulnerability Description
多种Unix/Linux操作系统和Cisco路由器的网络时间协议守护进程(NTPD)容易遭受远程缓冲区溢出攻击。 由于NTP基于无状态的UDP协议，于是可以伪造各种恶意的请求报文，引发远程缓冲区溢出。绝大多数情况下，NTPD是以root身份启动的，所以远程缓冲区溢出后将直接获取root权限。 尽管这次是常规缓冲区溢出，但为了有效利用它进行攻击还是相当困难的。目标缓冲区会因为某些原因被破坏，攻击完成时，shellcode真正可利用的缓冲区将小于70字节。下面的演示代码简单执行了/tmp/sh而已，完全可以构
CVSS Information
N/A
Vulnerability Type
N/A