CVE-2015-7973

NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html Broken Link
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html Broken Link
http://support.ntp.org/bin/view/Main/NtpBug2935 Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd Third Party Advisory
http://www.securityfocus.com/bid/81963 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1034782 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-3096-1 Third Party Advisory
https://bto.bluecoat.com/security-advisory/sa113 Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc Third Party Advisory
https://security.gentoo.org/glsa/201607-15 Third Party Advisory
https://security.netapp.com/advisory/ntap-20171031-0001/ Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 Third Party Advisory US Government Resource
https://www.kb.cert.org/vuls/id/718152 Third Party Advisory US Government Resource
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html Broken Link
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html Broken Link
http://support.ntp.org/bin/view/Main/NtpBug2935 Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd Third Party Advisory
http://www.securityfocus.com/bid/81963 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1034782 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-3096-1 Third Party Advisory
https://bto.bluecoat.com/security-advisory/sa113 Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc Third Party Advisory
https://security.gentoo.org/glsa/201607-15 Third Party Advisory
https://security.netapp.com/advisory/ntap-20171031-0001/ Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 Third Party Advisory US Government Resource
https://www.kb.cert.org/vuls/id/718152 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:tim_4r-ie_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:tim_4r-ie:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:tim_4r-ie_dnp3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:tim_4r-ie_dnp3:-:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p10:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p12:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p13:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p16:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p19:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p20:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p21:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p22:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p23:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p24:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p25:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p7:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p8:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p9:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p10:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p12:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p15:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p16:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p17:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p18:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p19:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p22:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p24:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p25:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p26:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p27:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p7:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p8:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p9:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p10:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p7:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p8:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p9:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

History

21 Nov 2024, 02:37

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html - Broken Link
References () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - Broken Link
References () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - Broken Link
References () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html - Broken Link
References () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - Broken Link
References () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - Broken Link
References () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - Broken Link
References () http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - Broken Link () http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - Broken Link
References () http://support.ntp.org/bin/view/Main/NtpBug2935 - Vendor Advisory () http://support.ntp.org/bin/view/Main/NtpBug2935 - Vendor Advisory
References () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd - Third Party Advisory () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd - Third Party Advisory
References () http://www.securityfocus.com/bid/81963 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/81963 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1034782 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1034782 - Third Party Advisory, VDB Entry
References () http://www.ubuntu.com/usn/USN-3096-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-3096-1 - Third Party Advisory
References () https://bto.bluecoat.com/security-advisory/sa113 - Third Party Advisory () https://bto.bluecoat.com/security-advisory/sa113 - Third Party Advisory
References () https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - Third Party Advisory () https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - Third Party Advisory
References () https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us - Third Party Advisory () https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us - Third Party Advisory
References () https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us - Third Party Advisory () https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us - Third Party Advisory
References () https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - Third Party Advisory () https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - Third Party Advisory
References () https://security.gentoo.org/glsa/201607-15 - Third Party Advisory () https://security.gentoo.org/glsa/201607-15 - Third Party Advisory
References () https://security.netapp.com/advisory/ntap-20171031-0001/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20171031-0001/ - Third Party Advisory
References () https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 - Third Party Advisory, US Government Resource () https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 - Third Party Advisory, US Government Resource
References () https://www.kb.cert.org/vuls/id/718152 - Third Party Advisory, US Government Resource () https://www.kb.cert.org/vuls/id/718152 - Third Party Advisory, US Government Resource

Information

Published : 2017-01-30 21:59

Updated : 2024-11-21 02:37


NVD link : CVE-2015-7973

Mitre link : CVE-2015-7973

CVE.ORG link : CVE-2015-7973


JSON object : View

Products Affected

freebsd

  • freebsd

netapp

  • clustered_data_ontap
  • oncommand_balance

siemens

  • tim_4r-ie_dnp3_firmware
  • tim_4r-ie
  • tim_4r-ie_dnp3
  • tim_4r-ie_firmware

ntp

  • ntp

canonical

  • ubuntu_linux
CWE
CWE-254

7PK - Security Features