CVE-2009-0159

Published: Apr 14, 2009Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.

Affected (29)

Products: Ntp: Ntp

Ntp

1 product

Ntp

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Ntp Ntp	Up to 4.2.4p7
Ntp Ntp	Version 4.0.72
Ntp Ntp	Version 4.0.73
Ntp Ntp	Version 4.0.90
Ntp Ntp	Version 4.0.91
Ntp Ntp	Version 4.0.92
Ntp Ntp	Version 4.0.93
Ntp Ntp	Version 4.0.94
Ntp Ntp	Version 4.0.95
Ntp Ntp	Version 4.0.96
Ntp Ntp	Version 4.0.97
Ntp Ntp	Version 4.0.98
Ntp Ntp	Version 4.0.99
Ntp Ntp	Version 4.1.0
Ntp Ntp	Version 4.1.2
Ntp Ntp	Version 4.2.0
Ntp Ntp	Version 4.2.2
Ntp Ntp	Version 4.2.2p1
Ntp Ntp	Version 4.2.2p2
Ntp Ntp	Version 4.2.2p3
Ntp Ntp	Version 4.2.2p4
Ntp Ntp	Version 4.2.4
Ntp Ntp	Version 4.2.4p0
Ntp Ntp	Version 4.2.4p1
Ntp Ntp	Version 4.2.4p2
Ntp Ntp	Version 4.2.4p3
Ntp Ntp	Version 4.2.4p4
Ntp Ntp	Version 4.2.4p5
Ntp Ntp	Version 4.2.4p6

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (92)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc (unsafe URL)

Source: cve@mitre.org

http://bugs.pardus.org.tr/show_bug.cgi?id=9532

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=136482797910018&w=2

Source: cve@mitre.org

http://ntp.bkbits.net:8080/ntp-stable/?PAGE=gnupatch&REV=1.1565

Source: cve@mitre.org

http://osvdb.org/53593

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2009-1039.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2009-1040.html

Source: cve@mitre.org

http://secunia.com/advisories/34608

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35074

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35137

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35138

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35166

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35169

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35253

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35308

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35336

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35416

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35630

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/37471

Source: cve@mitre.org

Vendor Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238

Source: cve@mitre.org

http://support.apple.com/kb/HT3549

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1801

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:092

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/34481

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1022033

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: cve@mitre.org

US Government Resource

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0999

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1297

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=490617

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/49838

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19392

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5411

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8386

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8665

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9634

Source: cve@mitre.org

https://rhn.redhat.com/errata/RHSA-2009-1651.html

Source: cve@mitre.org

https://support.ntp.org/bugs/show_bug.cgi?id=1144

Source: cve@mitre.org

Patch

https://usn.ubuntu.com/777-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html

Source: cve@mitre.org

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc (unsafe URL)