← Back

CVE-2004-0657

nvd nist
Published: Aug 6, 2004Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.

Affected (7)

Products: Ntp: Ntp · Hp: Tru64 Unix
Ntp
1 product
Ntp
Hp
1 product
Tru64 Unix
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ntp
Before 4.0
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Hp
Tru64 Unix
Version 4.0f patch_kit8
Tru64 Unix
Version 4.0g patch_kit4
Tru64 Unix
Version 5.1b patch_kit2
Tru64 Unix
Version 5.1b patch_kit3
Tru64 Unix
Version 5.1b patch_kit4
Tru64 Unix
Version 51.1a patch_kit6

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (6)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
PatchThird Party AdvisoryUS Government Resource
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.