Package name
ntp
Date
2009-05-19
Advisory ID
MDVSA-2009:117
Affected versions
2009.0 x86_64 , CS4.0 x86_64 , MNF2.0 i586 , 2009.1 i586 , 2009.0 i586 , 2008.1 i586 , CS3.0 x86_64 , CS4.0 i586 , CS3.0 i586 , 2008.1 x86_64 , 2009.1 x86_64

Problem description

A vulnerability has been found and corrected in ntp:

A buffer overflow flaw was discovered in the ntpd daemon's NTPv4
authentication code. If ntpd was configured to use public key
cryptography for NTP packet authentication, a remote attacker could
use this flaw to send a specially-crafted request packet that could
crash ntpd (CVE-2009-1252).

The updated packages have been patched to prevent this.

Updated packages

2009.0 x86_64

 9b6194897b6de17c86abb9a2cb84ae51  2009.0/x86_64/ntp-4.2.4-18.3mdv2009.0.x86_64.rpm
 1ee97fea7efd86fe3add5fba4ecfec2c  2009.0/x86_64/ntp-client-4.2.4-18.3mdv2009.0.x86_64.rpm
 ec4a015047af577bb4fb5193ebc73b5a  2009.0/x86_64/ntp-doc-4.2.4-18.3mdv2009.0.x86_64.rpm 
 336b5f097aa91fd62032c60d3ab93bba  2009.0/SRPMS/ntp-4.2.4-18.3mdv2009.0.src.rpm

CS4.0 x86_64

 e7a778b0189e74eca2fb98f2e22bb0ee  corporate/4.0/x86_64/ntp-4.2.0-21.5.20060mlcs4.x86_64.rpm
 a3ad12c1b3e4abfd685bd247ba168680  corporate/4.0/x86_64/ntp-client-4.2.0-21.5.20060mlcs4.x86_64.rpm 
 17d04e589fe4a88f183b35e5e81175b9  corporate/4.0/SRPMS/ntp-4.2.0-21.5.20060mlcs4.src.rpm

MNF2.0 i586

 f13ae773e9d3afddc4f67ff07d70983e  mnf/2.0/i586/ntp-4.2.0-2.3.C30mdk.i586.rpm 
 cd9135f51b67d4c2d1a924cc2b859b16  mnf/2.0/SRPMS/ntp-4.2.0-2.3.C30mdk.src.rpm

2009.1 i586

 467390878db0dfe74f8833ab476bd47f  2009.1/i586/ntp-4.2.4-22.1mdv2009.1.i586.rpm
 cbc18f35b2bbf0b7c13c44145758f399  2009.1/i586/ntp-client-4.2.4-22.1mdv2009.1.i586.rpm
 5fa7a3622d2dffb199d8cf6b002ff9f1  2009.1/i586/ntp-doc-4.2.4-22.1mdv2009.1.i586.rpm 
 e72c4addf0675ed818481cb713ccdf38  2009.1/SRPMS/ntp-4.2.4-22.1mdv2009.1.src.rpm

2009.0 i586

 9b976f0f58f698028305912d1373bf5a  2009.0/i586/ntp-4.2.4-18.3mdv2009.0.i586.rpm
 b83effb5ee3ec30e0789bb8ea002880b  2009.0/i586/ntp-client-4.2.4-18.3mdv2009.0.i586.rpm
 bda0ecab0c1e2430bd9a41f6971780aa  2009.0/i586/ntp-doc-4.2.4-18.3mdv2009.0.i586.rpm 
 336b5f097aa91fd62032c60d3ab93bba  2009.0/SRPMS/ntp-4.2.4-18.3mdv2009.0.src.rpm

2008.1 i586

 1d882a7929233e5ca6421cf6c17647c3  2008.1/i586/ntp-4.2.4-15.3mdv2008.1.i586.rpm
 3b49b365ae0070f4f24ff6f6aaea9fce  2008.1/i586/ntp-client-4.2.4-15.3mdv2008.1.i586.rpm
 b03b71b20835b7236bd066157de952aa  2008.1/i586/ntp-doc-4.2.4-15.3mdv2008.1.i586.rpm 
 681aa840ad8232b93df44f5bf2e22edd  2008.1/SRPMS/ntp-4.2.4-15.3mdv2008.1.src.rpm

CS3.0 x86_64

 aacc68ce9aac646ecc29223170a71a0e  corporate/3.0/x86_64/ntp-4.2.0-2.3.C30mdk.x86_64.rpm 
 ad819672d9f5c7245285ce272c8cbc57  corporate/3.0/SRPMS/ntp-4.2.0-2.3.C30mdk.src.rpm

CS4.0 i586

 e4ff06fde6e3ec13f50dbe036fed9bfd  corporate/4.0/i586/ntp-4.2.0-21.5.20060mlcs4.i586.rpm
 aa58f14a5ffbe83eaf53d52901dd8673  corporate/4.0/i586/ntp-client-4.2.0-21.5.20060mlcs4.i586.rpm 
 17d04e589fe4a88f183b35e5e81175b9  corporate/4.0/SRPMS/ntp-4.2.0-21.5.20060mlcs4.src.rpm

CS3.0 i586

 a0176552645161d59f540e6399a91f01  corporate/3.0/i586/ntp-4.2.0-2.3.C30mdk.i586.rpm 
 ad819672d9f5c7245285ce272c8cbc57  corporate/3.0/SRPMS/ntp-4.2.0-2.3.C30mdk.src.rpm

2008.1 x86_64

 ebe05407ba6991d29b97229e334bb462  2008.1/x86_64/ntp-4.2.4-15.3mdv2008.1.x86_64.rpm
 f66ff4c9a3f7460d601e894b29dce35a  2008.1/x86_64/ntp-client-4.2.4-15.3mdv2008.1.x86_64.rpm
 68447ae88a14960ca4cea0771a1eaf42  2008.1/x86_64/ntp-doc-4.2.4-15.3mdv2008.1.x86_64.rpm 
 681aa840ad8232b93df44f5bf2e22edd  2008.1/SRPMS/ntp-4.2.4-15.3mdv2008.1.src.rpm

2009.1 x86_64

 3dcdba167a28697ceca9e95d28738f59  2009.1/x86_64/ntp-4.2.4-22.1mdv2009.1.x86_64.rpm
 6546b3440fbc7d6495fb379858253955  2009.1/x86_64/ntp-client-4.2.4-22.1mdv2009.1.x86_64.rpm
 56b1b03967370acb70a461bff6edb596  2009.1/x86_64/ntp-doc-4.2.4-22.1mdv2009.1.x86_64.rpm 
 e72c4addf0675ed818481cb713ccdf38  2009.1/SRPMS/ntp-4.2.4-22.1mdv2009.1.src.rpm

References