NVD

Id
36022  
Name
CVE-2014-9293  
Description
The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-19  
Modified Date
2017-01-02  
Seq
2014-9293  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184207 36022 CVE-2014-9293 http://advisories.mageia.org/MGASA-2014-0541.html  View
184208 36022 CVE-2014-9293 http://bk1.ntp.org/ntp-dev/ntpd/ntp_config.c?PAGE=diffs&REV=4b6089c5KXhXqZqocF0DMXnQQsjOuw  View
184209 36022 CVE-2014-9293 http://bugs.ntp.org/show_bug.cgi?id=2665  View
184210 36022 CVE-2014-9293 HPSBPV03266  View
184211 36022 CVE-2014-9293 HPSBGN03277  View
184212 36022 CVE-2014-9293 SSRT101872  View
184213 36022 CVE-2014-9293 HPSBOV03505  View
184214 36022 CVE-2014-9293 RHSA-2014:2025  View
184215 36022 CVE-2014-9293 RHSA-2015:0104  View
184216 36022 CVE-2014-9293 62209  View
184217 36022 CVE-2014-9293 http://support.ntp.org/bin/view/Main/SecurityNotice  View
184218 36022 CVE-2014-9293 VU#852879  View
184219 36022 CVE-2014-9293 MDVSA-2015:003  View
184220 36022 CVE-2014-9293 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
184221 36022 CVE-2014-9293 71757  View
184222 36022 CVE-2014-9293 https://bugzilla.redhat.com/show_bug.cgi?id=1176032  View
184223 36022 CVE-2014-9293 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04790232  View
184224 36022 CVE-2014-9293 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04916783  View
184225 36022 CVE-2014-9293 https://kc.mcafee.com/corporate/index?page=content&id=SB10103  View
184226 36022 CVE-2014-9293 20141222 Multiple Vulnerabilities in ntpd Affecting Cisco Products  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18475 JVNDB-2014-007350 NTP の ntpd の config_auth 機能における暗号保護メカニズムを破られる脆弱性 NTP の ntpd の config_auth 関数は、認証キーが設定されていない場合、不適切にキーを生成され、暗号保護メカニズムを破られる脆弱性が存在します。 CVE-2014-9293 76586 CVE-2014-9293 36022 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007350.html 2014-11-03 2016-11-09 View