oval:org.mitre.oval:def:19392

Definition Id: oval:org.mitre.oval:def:19392

Oval ID:	oval:org.mitre.oval:def:19392
Title:	HP-UX Running XNTP, Remote Denial of Service (DoS) and Execution of Arbitrary Code
Description:	Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0159	Version:	9
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02927 HP-UX B.11.31 AND filesets tests NTP.INETSVCS2-BOOT version is less than C.4.2.6.0.0 AND NTP.NTP-AUX version is less than C.4.2.6.0.0 AND NTP.NTP-RUN version is less than C.4.2.6.0.0 OR Criteria meets HP Security Bulletin HPSBUX02758 HP-UX B.11.31 AND filesets tests Networking.NET-PRG is installed AND Networking.NET-RUN is installed AND OS-Core.SYS-ADMIN is installed AND ProgSupport.C-INC is installed AND Networking.NET-RUN-64 is installed AND Networking.NET2-KRN is installed AND Networking.NET2-RUN is installed AND Networking.NMS2-KRN is installed AND OS-Core.CORE2-KRN is installed AND OS-Core.SYS2-ADMIN is installed AND Networking.NET-RUN-64 is installed AND Networking.NET2-KRN is installed AND Networking.NET2-RUN is installed AND Networking.NMS2-KRN is installed AND OS-Core.CORE2-KRN is installed AND OS-Core.SYS2-ADMIN is installed AND NOT Patch PHNE_42470 is installed