CVE-2001-0414

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 92%

from disclosure to weapon0 days

Published on NVDSep 18

1st PoCApr 4

metasploitApr 4

exploitation probability

92%top 1% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.

Affected products

n/a · n/a

public PoCs found — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16285 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20727 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9940

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:31.ntpd.asc ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2001-004.txt.asc ftp://ftp.sco.com/SSE/sse073.ltr ftp://ftp.sco.com/SSE/sse074.ltr http://archives.neohapsis.com/archives/bugtraq/2001-04/0127.html http://archives.neohapsis.com/archives/bugtraq/2001-04/0225.html http://archives.neohapsis.com/archives/bugtraq/2001-04/0314.html http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000392 http://lists.suse.com/archives/suse-security-announce/2001-Apr/0000.html http://marc.info/?l=bugtraq&m=98642418618512&w=2 http://marc.info/?l=bugtraq&m=98654963328381&w=2 http://marc.info/?l=bugtraq&m=98659782815613&w=2