CVEvulnerability

CVE-2001-0414

10.0 HIGH Published 2001-06-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-06-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.

Affected configurations

• dave mills ntpd (<= 4.0.99k) • dave mills ntpd 4.0.99 • dave mills ntpd 4.0.99a • dave mills ntpd 4.0.99b • dave mills ntpd 4.0.99c • dave mills ntpd 4.0.99d • dave mills ntpd 4.0.99e • dave mills ntpd 4.0.99f • dave mills ntpd 4.0.99g • dave mills ntpd 4.0.99h • dave mills ntpd 4.0.99i • dave mills ntpd 4.0.99j • dave mills xntp3 5.93 • dave mills xntp3 5.93a • dave mills xntp3 5.93b • dave mills xntp3 5.93c • dave mills xntp3 5.93d • dave mills xntp3 5.93e

References