Cisco IOS XE NTP Information Disclosure (CSCuj66318)

This script is Copyright (C) 2014-2015 Tenable Network Security, Inc.

Synopsis :

The remote device is affected by an information disclosure

Description :

The remote Cisco device potentially contains an issue with the 'ntp
access-group' which could allow a remote attacker to bypass the NTP
access group and query an NTP server configured to deny-all requests.

See also :

Solution :

Upgrade to the relevant fixed version referenced in Cisco bug ID

Risk factor :

Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.3
Public Exploit Available : true

Family: CISCO

Nessus Plugin ID: 77053 ()

Bugtraq ID: 68463

CVE ID: CVE-2014-3309