New Search

RHSA-2009:0046 -- ntp security update (Moderate)

oval:org.mitre.oval:def:28923

Updated ntp packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Network Time Protocol (NTP) is used to synchronize a computer's time with a referenced time source. A flaw was discovered in the way the ntpd daemon checked the return value of the OpenSSL EVP_VerifyFinal function. On systems using NTPv4 authentication this could lead to an incorrect verification of cryptographic signatures allowing time-spoofing attacks. (CVE-2009-0021)

Family:
unix
Status:
ACCEPTED
Platform(s):
  • Red Hat Enterprise Linux 4
  • CentOS Linux 5
  • Red Hat Enterprise Linux 5
Class:
patch
Reference(s):
  • RHSA-2009:0046
  • CESA-2009:0046-CentOS 5
  • CVE-2009-0021
Product(s):
  • ntp