CVE-2015-7851

Published Jan 28, 2020

Last updated 4 years ago

CVSS medium 6.5

Overview

Description: Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.5
Impact score: 3.6
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 3.5
Impact score: 2.9
Exploitability score: 6.8
Vector string: AV:N/AC:M/Au:S/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-22

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C240BAAB-8C12-4501-9DC6-FB877304E908",
            "versionEndExcluding": "4.2.8",
            "versionStartIncluding": "4.2.0"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "79494F07-6081-497D-8A2D-B05486599EAE",
            "versionEndExcluding": "4.3.77",
            "versionStartIncluding": "4.3.0"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C855BBD2-2B38-4EFF-9DBE-CA61CCACD0DE"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "49ADE0C3-F75C-4EC0-8805-56013F0EB92C"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D8FF625A-EFA3-43D1-8698-4A37AE31A07C"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E3B99BBD-97FE-4615-905A-A614592226F8"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E7A9AD3A-F030-4331-B52A-518BD963AB8A"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C293B8BE-6691-4944-BCD6-25EB98CABC73"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CEA650F8-2576-494A-A861-61572CA319D0"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4ED21EE8-7CBF-4BC5-BFC3-185D41296238"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C76A0B44-13DE-4173-8D05-DA54F6A71759"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1450241C-2F6D-4122-B33C-D78D065BA403"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "721AFD22-91D3-488E-A5E6-DD84C86E412B"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D6ADDB1-2E96-4FF6-AE95-4B06654D38B0"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "41E44E9F-6383-4E12-AEDC-B653FEA77A48"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "466D9A37-2658-4695-9429-0C6BF4A631C2"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "99774181-5F12-446C-AC2C-DB1C52295EED"
          },
          {
            "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4427EE6D-3F79-4FF5-B3EC-EE6BD01562CE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Social media

Configurations

References