Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2001-0414

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.

Published

2001-06-18T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application dave_mills ntpd ≤ 4.0.99k Yes
Application dave_mills ntpd 4.0.99 Yes
Application dave_mills ntpd 4.0.99a Yes
Application dave_mills ntpd 4.0.99b Yes
Application dave_mills ntpd 4.0.99c Yes
Application dave_mills ntpd 4.0.99d Yes
Application dave_mills ntpd 4.0.99e Yes
Application dave_mills ntpd 4.0.99f Yes
Application dave_mills ntpd 4.0.99g Yes
Application dave_mills ntpd 4.0.99h Yes
Application dave_mills ntpd 4.0.99i Yes
Application dave_mills ntpd 4.0.99j Yes
Application dave_mills xntp3 5.93 Yes
Application dave_mills xntp3 5.93a Yes
Application dave_mills xntp3 5.93b Yes
Application dave_mills xntp3 5.93c Yes
Application dave_mills xntp3 5.93d Yes
Application dave_mills xntp3 5.93e Yes
References