The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2015-04-08T10:00:00
Updated: 2024-08-06T04:54:16.002Z
Reserved: 2015-02-17T00:00:00
Link: CVE-2015-1798
Vulnrichment
No data.
NVD
Status : Modified
Published: 2015-04-08T10:59:04.610
Modified: 2024-11-21T02:26:10.010
Link: CVE-2015-1798
Redhat