CVE:CVE-2015-3405
CNNVD:CNNVD-201505-287
NTP是nwtime开源的一个网络时间协议。
NTP 4.2.8px版本至4.2.8p2-RC2之前版本、4.3.x版本至4.3.12之前版本存在安全特征问题漏洞。远程攻击者利用该漏洞获取产生的MD5密钥值。
solution:Upgrade ntp ntp to a higher version than 4.2.8:p1,4.2.8:p2,4.2.8:p2-rc1,4.3.0,4.3.1,4.3.2,4.3.3,4.3.4,4.3.5,4.3.6,4.3.7,4.3.8,4.3.9,4.3.10,4.3.11,and avoid the version 4.2.8:p1,4.2.8:p2,4.2.8:p2-rc1,4.3.0,4.3.1,4.3.2,4.3.3,4.3.4,4.3.5,4.3.6,4.3.7,4.3.8,4.3.9,4.3.10,4.3.11; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade opensuse suse_linux_enterprise_server to a higher version than 11.0:sp3,and avoid the version 11.0:sp3; Upgrade opensuse_project suse_linux_enterprise_desktop to a higher version than 11.0:sp3,and avoid the version 11.0:sp3; Upgrade suse suse_linux_enterprise_server to a higher version than 11.0:sp3,and avoid the version 11.0:sp3; Upgrade fedoraproject fedora to a higher version than 21,and avoid the version 21; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_for_power_big_endian to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_for_scientific_computing to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_from_rhui_6 to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0