CVE:CVE-2016-3988
CNNVD:CNNVD-201606-552
Meinberg IMS-LANTIME M3000等都是德国Meinberg公司的NTP时间服务器。
多款Meinberg产品的NTP time-server接口中存在基于栈的缓冲区溢出漏洞。远程攻击者可借助POST请求中的参数利用该漏洞获取敏感信息，修改数据，或造成拒绝服务。以下产品及版本受到影响：Meinberg IMS-LANTIME M3000、M1000、M500、LANTIME M900、M600、M400、M300、M200、M100、SyncFire 1100、LCES 6.0及之前版本。
solution:Upgrade meinberg ntp_server_firmware to a higher version than 6.0,and avoid the version (,6.0]; Upgrade meinberg ims-lantime_m1000 to a higher version than -; Upgrade meinberg ims-lantime_m3000 to a higher version than -; Upgrade meinberg ims-lantime_m500 to a higher version than -; Upgrade meinberg lantime_m100 to a higher version than -; Upgrade meinberg lantime_m200 to a higher version than -; Upgrade meinberg lantime_m300 to a higher version than -; Upgrade meinberg lantime_m400 to a higher version than -; Upgrade meinberg lantime_m600 to a higher version than -; Upgrade meinberg lantime_m900 to a higher version than -; Upgrade meinberg lces to a higher version than -; Upgrade meinberg syncfire_1100 to a higher version than -