CVE-2001-0414

Published: Jun 18, 2001Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.

Affected (18)

Products: Dave Mills: Ntpd, Xntp3

Dave Mills

2 products

Ntpd

Xntp3

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Dave Mills Ntpd	version ≤ 4.0.99k
Dave Mills Ntpd	Version 4.0.99
Dave Mills Ntpd	Version 4.0.99a
Dave Mills Ntpd	Version 4.0.99b
Dave Mills Ntpd	Version 4.0.99c
Dave Mills Ntpd	Version 4.0.99d
Dave Mills Ntpd	Version 4.0.99e
Dave Mills Ntpd	Version 4.0.99f
Dave Mills Ntpd	Version 4.0.99g
Dave Mills Ntpd	Version 4.0.99h
Dave Mills Ntpd	Version 4.0.99i
Dave Mills Ntpd	Version 4.0.99j
Dave Mills Xntp3	Version 5.93
Dave Mills Xntp3	Version 5.93a
Dave Mills Xntp3	Version 5.93b
Dave Mills Xntp3	Version 5.93c
Dave Mills Xntp3	Version 5.93d
Dave Mills Xntp3	Version 5.93e

References (48)

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:31.ntpd.asc (unsafe URL)

Source: cve@mitre.org

ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2001-004.txt.asc (unsafe URL)

Source: cve@mitre.org

ftp://ftp.sco.com/SSE/sse073.ltr (unsafe URL)

Source: cve@mitre.org

ftp://ftp.sco.com/SSE/sse074.ltr (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2001-04/0127.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2001-04/0225.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2001-04/0314.html

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000392

Source: cve@mitre.org

http://lists.suse.com/archives/suse-security-announce/2001-Apr/0000.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=98642418618512&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=98654963328381&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=98659782815613&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=98679815917014&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=98683952401753&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=98684202610470&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=98684532921941&w=2

Source: cve@mitre.org

http://www.calderasystems.com/support/security/advisories/CSSA-2001-013.0.txt

Source: cve@mitre.org

http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-036.php3

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/805

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2001-045.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/2540

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/6321

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3831

Source: cve@mitre.org

https://www.debian.org/security/2001/dsa-045

Source: cve@mitre.org

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:31.ntpd.asc (unsafe URL)