CVE-2004-0657

Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-08-06

Last modified

2024-08-08

Weaknesses

CWE-190

Affected products

• Tru64 Unix (Hp)
• Ntp (Ntp)

References

• http://marc.info/?l=bugtraq&m=108922292425219&w=2
• http://www.kb.cert.org/vuls/id/584606
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15406