oval:org.mitre.oval:def:6307

Definition Id: oval:org.mitre.oval:def:6307
 
Oval ID: oval:org.mitre.oval:def:6307
Title: HP-UX Running XNTP, Remote Execution of Arbitrary Code
Description: Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.
Family: unix Class: vulnerability
Reference(s): CVE-2009-1252
Version: 11
Platform(s): HP-UX 11
Product(s):
Definition Synopsis: