Уведомление безопасности DSA-801

Средняя (4.6)

(AV:L/AC:L/Au:N/C:P/I:P/A:P)

Debian

ntp (any) ntpdate (any) ntp-doc (any) ntp-refclock (any) ntp-server (any) ntp-simple (any)

Уведомление безопасности об уязвимостях ntp-doc, ntp, ntp-refclock, ntp-server, ntp-simple, ntpdate

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 3.1:
ppc:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1
s390x:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1
m68k:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1
i686:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1
arm:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1
sparc:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1
x86-64:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1
alpha:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1
ia64:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1
mips:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1
noarch:
ntp-doc - 4.2.0a+stable-2sarge1
mipsel:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1
hppa:
ntp - 4.2.0a+stable-2sarge1
ntp-refclock - 4.2.0a+stable-2sarge1
ntp-server - 4.2.0a+stable-2sarge1
ntp-simple - 4.2.0a+stable-2sarge1
ntpdate - 4.2.0a+stable-2sarge1

http://www.debian.org/security/dsa-801/

Источник: CVE
Наименование: CVE-2005-2496
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2496