CVE

Id
13702  
CVE No.
CVE-2005-2496  
Status
Candidate  
Description
The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.  
Phase
Assigned (20050808)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
100028 13702 CVE-2005-2496 DEBIAN:DSA-801  View
100029 13702 CVE-2005-2496 URL:http://www.debian.org/security/2005/dsa-801  View
100030 13702 CVE-2005-2496 FEDORA:FEDORA-2005-812  View
100031 13702 CVE-2005-2496 URL:http://www.securityspace.com/smysecure/catid.html?id=55155  View
100032 13702 CVE-2005-2496 MANDRAKE:MDKSA-2005:156  View
100033 13702 CVE-2005-2496 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:156  View
100034 13702 CVE-2005-2496 REDHAT:RHSA-2006:0393  View
100035 13702 CVE-2005-2496 URL:http://www.redhat.com/support/errata/RHSA-2006-0393.html  View
100036 13702 CVE-2005-2496 OVAL:oval:org.mitre.oval:def:9669  View
100037 13702 CVE-2005-2496 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9669  View
100038 13702 CVE-2005-2496 VUPEN:ADV-2005-1561  View
100039 13702 CVE-2005-2496 URL:http://www.vupen.com/english/advisories/2005/1561  View
100040 13702 CVE-2005-2496 BID:14673  View
100041 13702 CVE-2005-2496 URL:http://www.securityfocus.com/bid/14673  View
100042 13702 CVE-2005-2496 OSVDB:19055  View
100043 13702 CVE-2005-2496 URL:http://www.osvdb.org/19055  View
100044 13702 CVE-2005-2496 SECTRACK:1016679  View
100045 13702 CVE-2005-2496 URL:http://securitytracker.com/id?1016679  View
100046 13702 CVE-2005-2496 SECUNIA:16602  View
100047 13702 CVE-2005-2496 URL:http://secunia.com/advisories/16602  View
100048 13702 CVE-2005-2496 SECUNIA:21464  View
100049 13702 CVE-2005-2496 URL:http://secunia.com/advisories/21464  View
100050 13702 CVE-2005-2496 XF:ntp-incorrect-group-permissions(22035)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62289 JVNDB-2005-000491 PHP に含まれる PEAR XML-RPC の不正な XMLRPC リクエスト処理による任意の PHP コードを実行される脆弱性 PHP の PEAR XML-RPC には、XMLRPC 要求、および応答処理に不備が存在するため、解釈した XML ドキュメント内の特定の XML タグがネスト化されている場合に任意の PHP コードが eval() 関数に挿入される脆弱性が存在します。 CVE-2005-2498 13702 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000491.html  View