CVE-2015-7703

Fixed in a distro release EPSS 4%

The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.

Published 2017-07-24 · CVE record · OSV

Products: ntp, oracle linux, debian_linux, netapp oncommand_performance_manager, netapp oncommand_unified_manager, netapp clustered_data_ontap, netapp data_ontap, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation

Distro releases