ByteOS Network

CVE Vulnerability Details :

CVE-2015-7976

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-30 Jan, 2017 | 21:00

Updated At-06 Aug, 2024 | 08:06

▼CVE Numbering Authority (CNA)

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory x_refsource_CISCO
http://www.ubuntu.com/usn/USN-3096-1	vendor-advisory x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory x_refsource_SUSE
http://www.securitytracker.com/id/1034782	vdb-entry x_refsource_SECTRACK
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory x_refsource_SUSE
https://www.kb.cert.org/vuls/id/718152	third-party-advisory x_refsource_CERT-VN
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory x_refsource_SUSE
http://support.ntp.org/bin/view/Main/NtpBug2938	x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory x_refsource_SUSE
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory x_refsource_FREEBSD
https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory x_refsource_SUSE
https://security.gentoo.org/glsa/201607-15	vendor-advisory x_refsource_GENTOO

Hyperlink: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd

Resource:

vendor-advisory

x_refsource_CISCO

Hyperlink: http://www.ubuntu.com/usn/USN-3096-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.securitytracker.com/id/1034782

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://www.kb.cert.org/vuls/id/718152

Resource:

third-party-advisory

x_refsource_CERT-VN

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://support.ntp.org/bin/view/Main/NtpBug2938

Resource:

x_refsource_CONFIRM

Hyperlink: https://security.netapp.com/advisory/ntap-20171031-0001/

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc

Resource:

vendor-advisory

x_refsource_FREEBSD

Hyperlink: https://bto.bluecoat.com/security-advisory/sa113

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://security.gentoo.org/glsa/201607-15

Resource:

vendor-advisory

x_refsource_GENTOO

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory x_refsource_CISCO x_transferred
http://www.ubuntu.com/usn/USN-3096-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.securitytracker.com/id/1034782	vdb-entry x_refsource_SECTRACK x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory x_refsource_SUSE x_transferred
https://www.kb.cert.org/vuls/id/718152	third-party-advisory x_refsource_CERT-VN x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory x_refsource_SUSE x_transferred
http://support.ntp.org/bin/view/Main/NtpBug2938	x_refsource_CONFIRM x_transferred
https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory x_refsource_SUSE x_transferred
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory x_refsource_FREEBSD x_transferred
https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory x_refsource_SUSE x_transferred
https://security.gentoo.org/glsa/201607-15	vendor-advisory x_refsource_GENTOO x_transferred