Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NTP 安全漏洞
Vulnerability Description
NTP(Network Time Protocol,网络时间协议)是一款通过网络同步计算机时钟的协议。 NTP 4.2.8p6之前4.x版本和4.3.90之前4.3.x版本中存在安全漏洞,该漏洞源于程序执行数据包身份验证时没有检查对称密钥的对应关系。远程攻击者可借助任意的可信密钥利用该漏洞实施假冒攻击。
CVSS Information
N/A
Vulnerability Type
N/A