AIX NTP v4 Advisory : ntp_advisory9.asc (IV96311) (IV96312)

This script is Copyright (C) 2017 Tenable Network Security, Inc.

Synopsis :

The remote AIX host has a version of NTP installed that is affected
by multiple vulnerabilities.

Description :

The version of NTP installed on the remote AIX host is affected by
the following vulnerabilities :

- Multiple stack-based buffer overflow conditions exist in
various wrappers around the ctl_putdata() function
within file ntpd/ntp_control.c due to improper
validation of certain input from the ntp.conf file.
An unauthenticated, remote attacker can exploit these,
by convincing a user into deploying a specially
crafted ntp.conf file, to cause a denial of service
condition or possibly the execution of arbitrary code.

- A stack-based buffer overflow condition exists in the
datum_pts_receive() function within file
ntpd/refclock_datum.c when handling handling packets
from the '/dev/datum' device due to improper validation
of certain input. A local attacker can exploit this to
cause a denial of service condition or the execution of
arbitrary code. (CVE-2017-6462)

- A denial of service vulnerability exists when handling
configuration directives. An authenticated, remote
attacker can exploit this, via a malformed 'mode'
configuration directive, to crash the ntpd daemon.

See also :

Solution :

A fix is available and can be downloaded from the IBM AIX website.

Risk factor :

Medium / CVSS Base Score : 6.5
CVSS Temporal Score : 5.4
Public Exploit Available : true

Family: AIX Local Security Checks

Nessus Plugin ID: 102131 ()

Bugtraq ID: 97045

CVE ID: CVE-2017-6458

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now