This update of ntp improves a check for the return value of openssl's function EVP_VerifyFinal(). (CVE-2009-0021)

a. Updated OpenSSL package for the Service Console fixes a    security issue.

   OpenSSL 0.9.7a-33.24 and earlier does not properly check the return    value from the EVP_VerifyFinal function, which could allow a remote    attacker to bypass validation of the certificate chain via a    malformed SSL/TLS signature for DSA and ECDSA keys.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-5077 to this issue.

b. Update bind package for the Service Console fixes a security issue.

   A flaw was discovered in the way Berkeley Internet Name Domain    (BIND) checked the return value of the OpenSSL DSA_do_verify    function. On systems using DNSSEC, a malicious zone could present    a malformed DSA certificate and bypass proper certificate    validation, allowing spoofing attacks.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2009-0025 to this issue.

c. Updated vim package for the Service Console addresses several    security issues.

   Several input flaws were found in Visual editor IMproved's (Vim)    keyword and tag handling. If Vim looked up a document's maliciously    crafted tag or keyword, it was possible to execute arbitrary code as    the user running Vim.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-4101 to this issue.

   A heap-based overflow flaw was discovered in Vim's expansion of file    name patterns with shell wildcards. An attacker could create a    specially crafted file or directory name, when opened by Vim causes    the application to stop responding or execute arbitrary code.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-3432 to this issue.

   Several input flaws were found in various Vim system functions. If a    user opened a specially crafted file, it was possible to execute    arbitrary code as the user running Vim.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2008-2712 to this issue.

   A format string flaw was discovered in Vim's help tag processor. If    a user was tricked into executing the 'helptags' command on    malicious data, arbitrary code could be executed with the    permissions of the user running VIM.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2007-2953 to this issue.

ntp didn't properly check the return value of the openssl function EVP_VerifyFinal. (CVE-2009-0021)

Additionally a problem where ntpd refused to use keys from /etc/ntp.keys has been fixed.

It was discovered that NTP did not properly perform signature verification. A remote attacker could exploit this to bypass certificate validation via a malformed SSL/TLS signature.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Remove default ntp servers in ntp.conf [bug 14342986]

  - don't generate weak control key for resolver     (CVE-2014-9293)

  - don't generate weak MD5 keys in ntp-keygen     (CVE-2014-9294)

  - fix buffer overflows via specially-crafted packets     (CVE-2014-9295)

  - increase memlock limit again (#1035198)

  - allow selection of cipher for private key files     (#741573)

  - revert init script priority (#470945, #689636)

  - drop tentative patch (#489835)

  - move restorecon call to %posttrans

  - call restorecon on ntpd and ntpdate on start (#470945)

  - don't crash with more than 512 local addresses (#661934)

  - add -I option (#528799)

  - fix -L option to not require argument (#460434)

  - move ntpd and ntpdate to /sbin and start earlier on boot     (#470945, #689636)

  - increase memlock limit (#575874)

  - ignore tentative addresses (#489835)

  - print synchronization distance instead of dispersion in     ntpstat (#679034)

  - fix typos in ntpq and ntp-keygen man pages (#664524,     #664525)

  - clarify ntpd -q description (#591838)

  - don't verify ntp.conf (#481151)

  - replace Prereq tag

  - fix DoS with mode 7 packets (#532640, CVE-2009-3563)

  - compile with -fno-strict-aliasing

  - fix buffer overflow when parsing Autokey association     message (#500784, CVE-2009-1252)

  - fix buffer overflow in ntpq (#500784, CVE-2009-0159)

  - fix check for malformed signatures (#479699,     CVE-2009-0021)

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.7.  Mac OS X 10.5.7 contains security fixes for the following products : 

- Apache
- ATS
- BIND
- CFNetwork
- CoreGraphics
-Cscope
- CUPS
- Disk Images
- enscript
- Flash player
- Help Viewer
- iChat
- Internation Components for Unicode
- IPSec
- Kerberos
- Kernel
- Launch Services
- libxml
- Net-SNMP
- Network Time
- Networking
- OpenSSL
- PHP
- QuickDraw Manager
- ruby
- Safari
- Spotlight
- system_cmds
- telnet
- WebKit
- X11
- Terminal

ID	Name	Product	Family	Published	Updated	Severity
40284	openSUSE Security Update : ntp (ntp-439)	Nessus	SuSE Local Security Checks	7/21/2009	1/14/2021	medium
40389	VMSA-2009-0004 : ESX Service Console updates for openssl, bind, and vim	Nessus	VMware ESX Local Security Checks	7/27/2009	1/6/2021	high
41600	SuSE 10 Security Update : xntp (ZYPP Patch Number 6072)	Nessus	SuSE Local Security Checks	9/24/2009	1/14/2021	medium
40082	openSUSE Security Update : ntp (ntp-439)	Nessus	SuSE Local Security Checks	7/21/2009	1/14/2021	medium
37876	Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : ntp vulnerability (USN-705-1)	Nessus	Ubuntu Local Security Checks	4/23/2009	1/19/2021	medium
80394	OracleVM 3.2 : ntp (OVMSA-2015-0001)	Nessus	OracleVM Local Security Checks	1/7/2015	1/4/2021	high
5023	Mac OS X 10.5 < 10.5.7 Multiple Vulnerabilities	Nessus Network Monitor	Generic	8/18/2004	3/6/2019	critical
800792	Mac OS X 10.5 < 10.5.7 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection			high

Detections

Analytics

Plugins Search

medium

high

medium

medium

medium

high

critical

high