Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle mitigations via a crafted timestamp constraint with a valid certificate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenNTPD 安全漏洞
Vulnerability Description
OpenNTPD是一款用于Unix系统可以使计算机系统的本地时钟与远程NTP服务器同步的网络时间协议（NTP）。 OpenNTPD 6.0p1之前的版本中存在安全漏洞。远程攻击者可利用该漏洞拦截请求并发送到恶意的服务器上。
CVSS Information
N/A
Vulnerability Type
N/A