ID de Prueba:	1.3.6.1.4.1.25623.1.0.105677
Categoría:	CISCO
Título:	Multiple Vulnerabilities in ntpd (April 2015) Affecting Cisco Products (cisco-sa-20150408-ntpd)
Resumen:	Multiple Cisco products incorporate a version of the ntpd package.; Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated,; remote attacker to bypass authentication controls or to create a denial of service (DoS) condition.;; On April 7, 2015, NTP.org and US-CERT released a security advisory dealing with two issues regarding; bypass of authentication controls. These vulnerabilities are referenced in this document as follows:;; - CVE-2015-1798: NTP Authentication bypass vulnerability;; - CVE-2015-1799: NTP Authentication doesn't protect symmetric associations against DoS attacks;; Cisco has released software updates that address these vulnerabilities.;; Workarounds that mitigate these vulnerabilities are available.
Descripción:	Summary: Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to bypass authentication controls or to create a denial of service (DoS) condition. On April 7, 2015, NTP.org and US-CERT released a security advisory dealing with two issues regarding bypass of authentication controls. These vulnerabilities are referenced in this document as follows: - CVE-2015-1798: NTP Authentication bypass vulnerability - CVE-2015-1799: NTP Authentication doesn't protect symmetric associations against DoS attacks Cisco has released software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available. Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.3 CVSS Vector: AV:A/AC:M/Au:N/C:N/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1799 1032031 http://www.securitytracker.com/id/1032031 20150408 Multiple Vulnerabilities in ntpd (April 2015) Affecting Cisco Products http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd 20150408 Network Time Protocol Daemon Symmetric Mode Packet Processing Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=38275 73950 http://www.securityfocus.com/bid/73950 APPLE-SA-2015-06-30-2 http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html DSA-3222 http://www.debian.org/security/2015/dsa-3222 DSA-3223 http://www.debian.org/security/2015/dsa-3223 FEDORA-2015-5761 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html FEDORA-2015-5874 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html GLSA-201509-01 https://security.gentoo.org/glsa/201509-01 HPSBHF03557 http://marc.info/?l=bugtraq&m=145750740530849&w=2 HPSBUX03333 http://marc.info/?l=bugtraq&m=143213867103400&w=2 MDVSA-2015:202 http://www.mandriva.com/security/advisories?name=MDVSA-2015:202 RHSA-2015:1459 http://rhn.redhat.com/errata/RHSA-2015-1459.html SSRT102029 USN-2567-1 http://www.ubuntu.com/usn/USN-2567-1 VU#374268 http://www.kb.cert.org/vuls/id/374268 [chrony-announce] 20150407 chrony-1.31.1 released (security) http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html http://bugs.ntp.org/show_bug.cgi?id=2781 http://support.apple.com/kb/HT204942 http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html https://kc.mcafee.com/corporate/index?page=content&id=SB10114 openSUSE-SU-2015:0775 http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html Common Vulnerability Exposure (CVE) ID: CVE-2015-1798 1032032 http://www.securitytracker.com/id/1032032 20150408 Network Time Protocol Daemon MAC Checking Failure Authentication Bypass Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=38276 73951 http://www.securityfocus.com/bid/73951 http://bugs.ntp.org/show_bug.cgi?id=2779
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.