Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2016-1551 | First vendor Publication | 2017-01-27 |
| Vendor | Cve | Last vendor Modification | 2017-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N | |||
|---|---|---|---|
| Overall CVSS Score | 3.7 | ||
| Base Score | 3.7 | Environmental Score | 3.7 |
| impact SubScore | 1.4 | Temporal Score | 3.7 |
| Exploitabality Sub Score | 2.2 | ||
| Attack Vector | Network | Attack Complexity | High |
| Privileges Required | None | User Interaction | None |
| Scope | Unchanged | Confidentiality Impact | None |
| Integrity Impact | Low | Availability Impact | None |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 2.6 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | High |
| Cvss Expoit Score | 4.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, any packet with a source ip address of a reference clock (127.127.1.1 for example) that reaches the receive() function will match that reference clock's peer record and will be treated as a trusted peer. Any system that lacks the typical martian packet filtering which would block these packets is in danger of having its time controlled by an attacker. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1551 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-254 | Security Features |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 | |
| Application | 1 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2016-03-14 | ntpd reference clock impersonation attempt RuleID : 37842 - Revision : 4 - Type : SERVER-OTHER |
| 2016-03-14 | ntpd reference clock impersonation attempt RuleID : 37841 - Revision : 4 - Type : SERVER-OTHER |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2018-02-28 | Name : The version of Arista Networks EOS running on the remote device is affected b... File : arista_eos_sa0019.nasl - Type : ACT_GATHER_INFO |
| 2017-10-23 | Name : The remote device is affected by multiple vulnerabilities. File : juniper_space_jsa_10826.nasl - Type : ACT_GATHER_INFO |
| 2017-08-03 | Name : The remote AIX host has a version of NTP installed that is affected by multip... File : aix_ntp_v3_advisory7.nasl - Type : ACT_GATHER_INFO |
| 2017-04-04 | Name : The remote AIX host has a version of NTP installed that is affected by multip... File : aix_ntp_v4_advisory7.nasl - Type : ACT_GATHER_INFO |
| 2017-02-01 | Name : The remote host is affected by multiple vulnerabilities. File : citrix_xenserver_CTX220112.nasl - Type : ACT_GATHER_INFO |
| 2016-09-08 | Name : The remote AIX host is missing a security patch. File : aix_IV87939.nasl - Type : ACT_GATHER_INFO |
| 2016-09-08 | Name : The remote AIX host is missing a security patch. File : aix_IV87615.nasl - Type : ACT_GATHER_INFO |
| 2016-09-08 | Name : The remote AIX host is missing a security patch. File : aix_IV87614.nasl - Type : ACT_GATHER_INFO |
| 2016-09-08 | Name : The remote AIX host is missing a security patch. File : aix_IV87420.nasl - Type : ACT_GATHER_INFO |
| 2016-09-08 | Name : The remote AIX host is missing a security patch. File : aix_IV87419.nasl - Type : ACT_GATHER_INFO |
| 2016-08-29 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1912-1.nasl - Type : ACT_GATHER_INFO |
| 2016-07-21 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201607-15.nasl - Type : ACT_GATHER_INFO |
| 2016-07-18 | Name : The remote AIX host has a version of NTP installed that is affected by multip... File : aix_ntp_v4_advisory6.nasl - Type : ACT_GATHER_INFO |
| 2016-07-18 | Name : The remote AIX host has a version of NTP installed that is affected by multip... File : aix_ntp_v3_advisory6.nasl - Type : ACT_GATHER_INFO |
| 2016-06-17 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1568-1.nasl - Type : ACT_GATHER_INFO |
| 2016-06-01 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-649.nasl - Type : ACT_GATHER_INFO |
| 2016-05-20 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-599.nasl - Type : ACT_GATHER_INFO |
| 2016-05-16 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1291-1.nasl - Type : ACT_GATHER_INFO |
| 2016-05-13 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1278-1.nasl - Type : ACT_GATHER_INFO |
| 2016-05-05 | Name : The remote NTP server is affected by multiple vulnerabilities. File : ntp_4_2_8p7.nasl - Type : ACT_GATHER_INFO |
| 2016-05-02 | Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2016-120-01.nasl - Type : ACT_GATHER_INFO |
| 2016-04-27 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_b2487d9a0c3011e6acd0d050996490d0.nasl - Type : ACT_GATHER_INFO |
| 2016-01-21 | Name : The remote NTP server is affected by multiple vulnerabilities. File : ntp_4_2_8p6.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:46:26 |
|
| 2021-04-22 01:55:08 |
|
| 2020-05-23 00:49:32 |
|
| 2017-11-21 09:22:02 |
|
| 2017-11-10 09:23:01 |
|
| 2017-10-24 13:25:29 |
|
| 2017-09-03 09:24:01 |
|
| 2017-08-04 13:25:03 |
|
| 2017-07-01 09:23:20 |
|
| 2017-04-05 13:24:58 |
|
| 2017-02-25 00:22:46 |
|
| 2017-02-10 09:23:39 |
|
| 2017-02-01 17:24:23 |
|
| 2017-02-01 09:22:46 |
|
| 2017-01-31 09:24:25 |
|
| 2017-01-30 09:24:45 |
|
| 2017-01-29 09:23:42 |
|
| 2017-01-28 09:23:48 |
|
| 2017-01-27 21:24:03 |
|
