CVE-2015-7851
Summary
| CVE | CVE-2015-7851 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-01-28 17:15:00 UTC |
|---|
| Updated | 2020-06-18 18:33:00 UTC |
|---|
| Description | Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files. |
|---|
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Application |
Ntp |
Ntp |
All |
All |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-beta1 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-beta2 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-beta3 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-beta4 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-beta5 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-rc1 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-rc2 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p2 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p2-rc1 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p2-rc2 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p2-rc3 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p3 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p3-rc1 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p3-rc2 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p3-rc3 |
All |
All |
| Application |
Ntp |
Ntp |
All |
All |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-beta1 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-beta2 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-beta3 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-beta4 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-beta5 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-rc1 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p1-rc2 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p2 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p2-rc1 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p2-rc2 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p2-rc3 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p3 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p3-rc1 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p3-rc2 |
All |
All |
| Application |
Ntp |
Ntp |
4.2.8 |
p3-rc3 |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| Cisco Talos - Talos 2015 0062 |
MISC |
www.talosintel.com |
Exploit, Third Party Advisory |
| support.ntp.org/bin/view/Main/NtpBug2918 |
MISC |
support.ntp.org |
Vendor Advisory |
| support.ntp.org/bin/view/Main/SecurityNotice |
MISC |
support.ntp.org |
Release Notes, Vendor Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 590349 Rockwell Automation Stratix 5900 Multiple Vulnerabilities (ICSA-17-094-04)
